Comment - FBXL Lotide

Comment on Ways to Expose Services Publicly

helix@feddit.org ⁨21⁩ ⁨hours⁩ ago

If you use TLS like you should, your domains will be on the internet in the certificate transparency log. You should use a wildcard cert if you want this security by obscurity.

original

Sort:hotnew top

frongt@lemmy.zip ⁨7⁩ ⁨hours⁩ ago
Or run an internal CA

original
AllYourSmurf@lemmy.world ⁨14⁩ ⁨hours⁩ ago
Of course. The goal here is to not advertise. Make it hard for the bots to find you. With these steps, they can try your IP, but there’s nothing directly on your IP.

You still need proper security. Authentication is a good start, and it has the extra effect of adding an extra layer to prevent the bots from going further if they get lucky and guess a host name.

original