Discussions
Security
"The Synacess Cloud API...... uses standard HTTP response codes, authentication, and verbs."
You have us include our cloud access user/pass on all the PDUs that are to be part of the team. This statement from the main page would seem to indicate that that information is sent in the API in clear-text.
If I understand this all correctly, may I recommend that you offer, first, a way to use a set of credentials different than those used to sign into the cloud site itself for management, perhaps with a account restricted to API usage only. And second, that these communications are moved to (or can be moved to) HTTPS before you go to a release version?
Thanks!
John
Posted by John Straiton almost 2 years ago
Feature request: add timestamps to 'Alerts' section.
Add time and date of the alerts similar to the PDU's 'Event Log' feature.
Posted by Allen Chu almost 2 years ago