RE: API for Nabble 2

Posted by Gisle Hannemyr on
URL: https://support.nabble.com/API-for-Nabble-2-tp792099p1633894.html

AndrewWilcox wrote

When you log into Nabble, do we use SSL or encryption to protect the password? If not, then is there value in protecting the password in the REST call?

No, there is no SSL encryption anywhere at the present time (I hope they will provide it later).

However, When this scheme becomes available, I'll set up a separate ID to be the owner of a forum. I can live with my own login ID being hijacked by someone sniffing passwords - but I will be much less happy if my entire forum was hijacked. So IMHO, the owner id and password are much more sensitive than an ordinary Nabble user account.