<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
Yes I meant HTTPS over HTTP, which yes, I’m differentiating by those port numbers. Thanks for clarifying! We have been streaming HTTP for a long time, but I am at a university and there is a lot of emphasis on security. I was never really sure what the certificate
did for us in this case…but was attempting to comply!
<div class=""><br class="">
</div>
<div class="">Over the years we have had a small handful of IPs trying to maliciously access our Icecast server over port 8000. I guess the less of that I have to deal with, the better. But if there are streaming aggregators out there who can’t use the HTTPS
over the HTTP, then it may be better to deal with the inconvenience once in a while.</div>
<div class=""><br class="">
</div>
<div class="">Thanks for your help. <br class="">
<div class=""><br class="">
<div class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px; word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="word-wrap: break-word; -webkit-nbsp-mode: space; line-break: after-white-space;" class="">
<div style="color: rgb(0, 0, 0); font-family: Helvetica; font-size: 12px; font-style: normal; font-variant-caps: normal; font-weight: normal; letter-spacing: normal; text-align: start; text-indent: 0px; text-transform: none; white-space: normal; word-spacing: 0px; -webkit-text-stroke-width: 0px;">
Patricia Moynihan<br class="">
Director of Digital<br class="">
<br class="">
<a href="mailto:pmoynihan@fsu.edu" class="">pmoynihan@fsu.edu</a><br class="">
850-645-6067<br class="">
850-645-7200</div>
</div>
</div>
</div>
</div>
<div><br class="">
<blockquote type="cite" class="">
<div class="">On May 10, 2019, at 4:04 AM, Thomas B. Rücker <<a href="mailto:thomas@ruecker.fi" class="">thomas@ruecker.fi</a>> wrote:</div>
<br class="Apple-interchange-newline">
<div class="">
<div class="">Hi,<br class="">
<br class="">
On 5/10/19 3:11 AM, Patricia Moynihan wrote:<br class="">
<blockquote type="cite" class="">Are there any serious security risks for leaving port 8000 open to<br class="">
public use on icecast? I had wanted to limit to 8443 but it seems some<br class="">
radio devices cannot support this protocol.<br class="">
</blockquote>
<br class="">
<br class="">
The port number doesn't matter. I guess in your case you mean HTTP vs HTTPS.<br class="">
<br class="">
The proper and terse answer is:<br class="">
<br class="">
It doesn't matter if you use HTTP or HTTPS as long as you have a secure<br class="">
configuration including managed and strong (not bruteforceable)<br class="">
passwords AND you keep your Icecast server up to date wrt security<br class="">
updates (currently Version 2.4.4).<br class="">
<br class="">
From my anecdotal knowledge gained over 18 years of involvement in<br class="">
Icecast, if people would follow the above two, then 99,9% of incidents<br class="">
would not happen.<br class="">
<br class="">
The longer answer is that it will also depend on your 'threat model' and<br class="">
how you rate and address things that you consider 'risks' in this frame<br class="">
of reference. There is no one-fits-all or immediate answer that fits<br class="">
into this email.<br class="">
<br class="">
<br class="">
Hope this helps,<br class="">
<br class="">
Thomas<br class="">
<br class="">
<br class="">
_______________________________________________<br class="">
Icecast mailing list<br class="">
<a href="mailto:Icecast@xiph.org" class="">Icecast@xiph.org</a><br class="">
https://urldefense.proofpoint.com/v2/url?u=http-3A__lists.xiph.org_mailman_listinfo_icecast&d=DwIGaQ&c=HPMtquzZjKY31rtkyGRFnQ&r=il3mbeSthlxEJd_b1NtmGe2biSOKp7VwqcXPdl2MdRc&m=X3zh6M4zoa3mkJwmMiZz1f54FZWn_anDeugwt91Y9Uw&s=PddWQ35fNEeUXAPZc9z2OIcjlDRy3lSx_2XgODSskyM&e=<br class="">
</div>
</div>
</blockquote>
</div>
<br class="">
</div>
</div>
</body>
</html>