trogdan wrote:HerrNilsson wrote:But LDAPS is only for encrypting the credentials from the subsonic server and LDAP-server, the webinterface in encrypted through the HTTPS correct?
Yeah, only the web interface is encrypted through the HTTPS connection. I just happen to use LDAPS because it's used for other service outside of my local network.
The REST and web interface is encrypted through HTTPS.
Yes but i mean if you have HTTPS and LDAP (not LDAPS) and logon through a public site. The credentials are sent to the webserver over HTTPS.
Then in cleartext from the webserver to the LDAP-server. That's not a problem in most cases because it is sent internally in the network .