RE: DTube 0.2: Faster to serve videos, Stronger to resist censorship

You are viewing a single comment's thread from:

DTube 0.2: Faster to serve videos, Stronger to resist censorship

in dtube •  7 years ago 

Could you please explain these lines in your shell script?

ipfs config --json API.HTTPHeaders.Access-Control-Allow-Origin "[\"*\"]"

ipfs config --json API.HTTPHeaders.Access-Control-Allow-Credentials "[\"true\"]"

ipfs config --json API.HTTPHeaders.Access-Control-Allow-Methods "[\"PUT\", \"POST\", \"GET\"]"

It seems like I would be opening up my IPFS instance to be controlled by anyone throwing commands at it. How can I be sure I'm only letting your "pin on upvote" function have access to pin things on my node?

Authors get paid when people like you upvote their post.
If you enjoyed what you read here, create your account today and start earning FREE STEEM!
Sort Order:  

As long as your IPFS API is only open to 127.0.0.1 it should be fine. If you check the ipfs config file, you should see in Addresses.API that it is only allowing local connections. If you want to open your API to the external world, you'd need to replace that by 0.0.0.0 ;)