Hey everyone, I'm a hobby developer creating a web panel for one of my mods, and I want to make sure it's secure. The system I've set up uses a locked-down command queue API. All actions are audited, and it uses a per-server secret along with HTTP. There's no public access, and it operates on a server-to-server trust basis. Additionally, all actions are managed by the mod on the server side, with the panel only sending requests. Are there specific security measures I should focus on for a setup like this?
1 Answer
You definitely want to switch from plain HTTP to HTTPS. Plain HTTP can be easily intercepted, which poses a security risk. Using HTTPS will encrypt your data in transit. You can even use self-signed certificates, which will work fine for your private setup.
Noted it down, thanks!