Agent Security (Continued from General)

Agent Code
1

In case we aren’t supposed to talk about the client/agent in the general forums…

It was discussed that the agent URLs are https, but they aren’t for me, they are just http:

http://agent.electricimp.com/XXXXXXXXX

So my communication is open to all snoopers. Is that a feature that is coming soon?

2

See the latest answer by Peter in a related thread:

How secure is the electric imp?

qunuq

3

Agents support both currently… http.agenturl() returning an http:// URL instead of an https:// is a bug report I submitted a while ago and is probably just fairly low on the priority list.

I’m using something along the lines of

server.log(“https://agent.electricimp.com/”+http.agenturl().slice(29));

to properly set an HTTP Referer header (with the full knowledge that it will break as soon as the bug is squashed :wink: )

4

Ahh, good to know. Thanks! Very happy about the https!