Comments (10)
give control to the users means let them do the "wrong" choice, too.
for example, i have an instance on a sharehoster which does not allow a ssl connection. i'd like to use this app, too. i know the riscs, but if i would have the full control, i should be able to do this choice.
from myownnotes.
It should not be implemented as an »option«, but rather as a fallback. The flow should be like this:
- I put in the address of my ownCloud instance
- It shouldn’t matter if I put just the myowncloud.com, or with https:// prepended, or with http://, or with the webdav (remote.php/webdav) appended
- https is always tried first (the webdav part is cut since I assume you use the Notes API – people might still put that in because it’ſ needed for WebDAV clients)
- it it doesn’t work, theres a popup saying: »The address doesn’t work. Maybe it’s wrong, or SSL is not enabled. We recommend using SSL (https) for a secure connection«.
- there should be two options to click: »Change address« and »Use http (not secure)«
- Choosing to change the address goes back to step 1 (with the address intact and changeable, not that I need to put it in again!). Choosing http tries http connection
- If it works, you proceed to username+password input. Once the auth with that works, the notes list should automatically be loaded and displayed.
from myownnotes.
Another suggestion based on @jancborchardt:
- I put in the address of my ownCloud instance
- It shouldn’t matter if I put just the myowncloud.com, or with https:// prepended, or with http://, or with the webdav (remote.php/webdav) appended
- https is always tried first (the webdav part is cut since I assume you use the Notes API – people might still put that in because it’ſ needed for WebDAV clients)
it it doesn’t work, theres a popup saying: »The address doesn’t work. Maybe it’s wrong, or SSL is not enabled. We recommend using SSL (https) for a secure connection«.Try http://. If http:// is not available, theres a popup saying "The address doesn't work. Maybe it's wrong". If http:// does work, theres a popup saying "Warning: SSL is not enabled, sending passwords over a unsecure connection is not recommended!" (or so).- there should be a "try-me-i-know-what-i-am-doing"-button ("OK") and a "aargh-you-are-right-i-will-configure-ssl"-Button ("Abort")
from myownnotes.
As our opinions deviate and as I need far more space to explain my point of view, I published a blog post regarding this issue: https://blog.entwicklerbier.org/2014/05/securing-the-internet-of-things-how-about-securing-the-internet-first
from myownnotes.
I agree with @stefan-niedermann’s suggestion.
@maltefiala it’s very simple: Many people don’t have the means to add SSL to their ownCloud instance. For whatever reason. As long as they are informed that this is insecure, it should still work. Otherwise you’ll lock a large part of potential users out which have no means of changing the reason anyway.
@maltefiala btw, since Aykit is based in Vienna, you might want to meet up with @Raydiation – he’s the developer of the News and Notes apps (and the Appframework) and based in Vienna as well! :)
from myownnotes.
Connection without SSL will not be tolerated.
from myownnotes.
@maltefiala Your stance about http/https is laudable, however there are cases where http makes sense (e.g., hosting owncloud on a home server that is accessible only over VPN, with the VPN server at the same machine listening to port 443 to avoid firewalls).
In any case, thanks for the app.
from myownnotes.
@prasinos even there the HTTPS setup will work ;)
from myownnotes.
@Raydiation True ;) But, it requires changing the config of the openvpn server to listen to some other port, and the config of the router to redirect 443 to the new port, etc. Not that difficult of course, but it's not that clean either.
Anyway, I didn't want to reopen the issue, I respect maltefiala's decision.
from myownnotes.
@prasinos : The next release allows custom ports. See 826ac09
from myownnotes.
Related Issues (20)
- MyOwnNotes 2.0 crashes in a systematic way HOT 4
- MyOwnNotes 2 not available on Play Store yet HOT 1
- Note not syncing HOT 5
- App does not login to OwnCloud with URLs inlcuding subfolder. HOT 2
- Cannot logon to owncloud server HOT 3
- Anybody out there? HOT 3
- App closes automatically, Android N HOT 1
- Not getting correct JSON from server. server OK? HOT 1
- MyOwnNotes 2.0 does not see notes stored as *.md HOT 3
- Connection error with Android app and no notes saved to Owncloud HOT 3
- Back button doesn't exit the app HOT 1
- Build not working: Could not find com.afollestad.material-dialogs:core:0.8.1.0.
- Bump versions
- Propose Logo
- Looking for new maintainer
- Crash upon notes creation
- Feature request: Have filenames accessible
- File renaming not executed correctly
- Changes lost due to PW error
- Cannot log into OwnCloud HOT 1
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from myownnotes.