Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Feature: Practical URL Parameter Encryption #1

Merged
merged 18 commits into from
Aug 8, 2024

Conversation

NotsoanoNimus
Copy link
Member

The What

Adds a way to generically and securely encrypt the URLs of destination feeds.

Hate having passive observers of your feed links know which 'special feed' queries you're running? How about exposing those pesky shopping queries?

Tired of having to make your own custom modifications to bridges when you're not a developer? This will be good for you! 😄

The Function

Normal feeds are still created per the usual manner.
image

The URL looks like it always does, but a new subtle menu appears labeled "Encrypt This Feed".
image

Clicking on it shows a brief explanation and a button linking to an encrypted URL that contains all the current URL parameters.
image

The page with the encrypted URL shows the same details (without revealing the original search link or other possible inputs).
image

Alternative formats also work with encrypted URLs (from the encrypted HTML format).
image

Disclaimer: I am not a front-end developer (or very artsy). The 'look and feel' of this could possibly be improved.

The Why

  • Obscurity: keep private bridge names and parameters private... Any observer of your link still won't know what you're querying unless they visit it. (And if you have AUTH enabled, the link is now completely PRIVATE.)
  • Fully optional: no credit card required. 😉
  • Out-of-the-box: functions as part of the core framework/libraries.
  • Subtle: don't need to use it or care about it, and it's not in the way.
  • Bridge-agnostic: does not require any modifications to existing bridges.
  • Non-disruptive: the feature is turned off by default and its changes have no effects on normal application operation.
  • Speedy: no latency issues are introduced by the feature, whether used or not.

Motivated by my own needs and free time, with a final push by RSS-Bridge#4161 to anonymize URLs. These fixed URLs (even containing login credentials) can be safely and confidently given to URL shortening services. Just don't change the encryption key once it's set!

NotsoanoNimus and others added 18 commits July 29, 2024 19:18
…ce no definition of bridge inputs with the enc token key name
…ld come first, followed by no auth, then enc checking, then finally normal processing
* [NVIDIADriverBridge] Initial Commit

Fetch the latest NVIDIA Linux driver updates

* Update NVIDIADriverBridge.php

* refactor

* rename

---------

Co-authored-by: Dag <[email protected]>
@NotsoanoNimus NotsoanoNimus merged commit 8f905dd into master Aug 8, 2024
6 of 7 checks passed
@NotsoanoNimus NotsoanoNimus deleted the zpuhl/encrypted-urls branch August 8, 2024 01:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants