Security concerns over accessing astrobox from the Internet

AstroPrint Cloud Service
#1

Hello,

Using the Astroprint app I can access my astrobox raspberry pi.

I wouldn’t be worried if the communication was only outbound from the astrobox but I can pause or cancel a print job so the astroprint app seems to be accessing the raspberry pi directly.

Can you please explain how the inbound communication is done and how can I be sure my home LAN security is not being potentially compromised by this?

Thanks in advance,
Nuno

#2

The AstroBox creates a Secure WebSocket Connection with our servers. The traffic goes over port 443 just like any https traffic and is encrypted using SSL. Websockets are a persistent bi-directional channel. Establishing the connection is always outbound and once the connection is established the SSL protection avoids traffic from being injected in either direction by any other party than the two ends (your astrobox and our server)

2 Likes