Re:Why Is This Website Port Scanning Me?
by geofft on Wednesday May 20, 2020 @06:45PM
(#23252876)
Since these use cases already require having software installed on your machine, it seems fine and safer to use a browser extension with native messaging for this:
That bypasses the entire certificate question and lets the website know it's communicating with exactly this app and not something happening to listen on the port (and vice versa, too).
... Or, depending on what you're doing, just use a real desktop app, perhaps with an embedded browser.
Re:Why Is This Website Port Scanning Me?
by vbezhenar on Thursday May 21, 2020 @09:39AM
(#23258160)
Yep, that might work. But that would require significantly more work to support all browsers and platforms. Currently it's just a Java application and it works independently of OS or browser.
https://developer.chrome.com/extensions/nativeMessaging
https://wiki.mozilla.org/WebExtensions/Native_Messaging
That bypasses the entire certificate question and lets the website know it's communicating with exactly this app and not something happening to listen on the port (and vice versa, too).
... Or, depending on what you're doing, just use a real desktop app, perhaps with an embedded browser.