What are the security risks of providing services with the http protocol on the public Internet #374

Closed
opened 2025-12-29 01:27:54 +01:00 by adam · 1 comment
Owner

Originally created by @ghost on GitHub (Nov 20, 2022).

Hello Developer, I'm a non-technical person

I want to use headscale directly on port 8080 of the IP address on the VPS to connect to the client
It has a public ipv4 address and is globally accessible

I don't want to use a domain name or configure an SSL certificate, so I'm wondering what the security implications of doing this are
Like this: http://123.123.123.123:8080

Can an attacker gain unauthorized access to my VLAN?
Is the data transmitted in the virtual local area network safe?

Originally created by @ghost on GitHub (Nov 20, 2022). Hello Developer, I'm a non-technical person I want to use headscale directly on port 8080 of the IP address on the VPS to connect to the client It has a public ipv4 address and is globally accessible I don't want to use a domain name or configure an SSL certificate, so I'm wondering what the security implications of doing this are Like this: http://123.123.123.123:8080 Can an attacker gain unauthorized access to my VLAN? Is the data transmitted in the virtual local area network safe?
adam added the bug label 2025-12-29 01:27:54 +01:00
adam closed this issue 2025-12-29 01:27:54 +01:00
Author
Owner

@juanfont commented on GitHub (Nov 20, 2022):

A very decided attacker could have a man-in-the-middle attack. Please use certificates.

@juanfont commented on GitHub (Nov 20, 2022): A very decided attacker could have a man-in-the-middle attack. Please use certificates.
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: starred/headscale#374