kentonv changed the topic of #sandstorm to: Welcome to #sandstorm: home of all things sandstorm.io. Say hi! | Have a question but no one is here? Try asking in the discussion group: https://groups.google.com/group/sandstorm-dev | Public logs at https://botbot.me/freenode/sandstorm/
blueminder has joined #sandstorm
harish has quit [Ping timeout: 256 seconds]
xet7 has quit [Quit: Leaving]
digitalcircuit has quit [Quit: Signing off from Quassel - see ya!]
digitalcircuit has joined #sandstorm
harish has joined #sandstorm
pie_ has quit [Ping timeout: 248 seconds]
simpson has quit [Ping timeout: 256 seconds]
simpson has joined #sandstorm
harish has quit [Ping timeout: 248 seconds]
ocdtrekkie has quit [Read error: Connection reset by peer]
harish has joined #sandstorm
xet7 has joined #sandstorm
taktoa has joined #sandstorm
koad has joined #sandstorm
taktoa has quit [Ping timeout: 240 seconds]
pie_ has joined #sandstorm
xet7 has quit [Remote host closed the connection]
charlie-de-tx has joined #sandstorm
taktoa has joined #sandstorm
<charlie-de-tx> I prefer to use my own DNS/domain and SSL. If I'm using sandstorm for wekan, docuwiki, and davros is there need for a wildcard DNS entry and SSL cert?
<TimMc> charlie-de-tx: yep
<TimMc> Under the covers, every time you open a grain it is presented on a unique subdomain, hence the need for wildcard DNS and a wildcard TLS cert.
<TimMc> but you can get the latter for about $45/yr
<charlie-de-tx> I've never seen a subdomain in my sandcats.io
<TimMc> oh and I guess Let's Encrypt can do wildcard certs now
<TimMc> charlie-de-tx: The iframe containing the UI fro the grain is running on a subdomain.
<charlie-de-tx> ok, thanks, Tim about the subdomain. And yeah, I think I'll look into the Let's Encrypt
<charlie-de-tx> that's all I was curious about. Thanks
<Zarutian> re iframe, subdomains and 'origins': as the iframe is on an origin that is a subdomain of the enclosing frame then doesnt the enclosing frame have access to everything in the iframe?
<Zarutian> I ask mainly to point out that it might be possible to use sandboxed iframes with never-the-same origin and proxy all xmlhttp and such through a message port to the enclosing frame.
charlie-de-tx has quit [Quit: http://www.kiwiirc.com/ - A hand crafted IRC client]
koad has quit [Read error: Connection reset by peer]
<ccx> Zarutian: I haven't really dug too deep into sandstorm, but I believe the enclosing frame works as a powerbox and thus is supposed to have the access.
<Zarutian> ccx: sure. I was just thinking of why the subdomains were used and I suspect for seperation from sibling iframes and such.
<TimMc> It protects from CSRF attacks and similar -- can't make those attacks if you can't predict the hostname. :-P
<TimMc> I don't know if that's the main reason though.
taktoa has quit [Ping timeout: 265 seconds]
taktoa has joined #sandstorm
koad has joined #sandstorm
ocdtrekkie has joined #sandstorm
<ocdtrekkie> There's a whole page on why Sandstorm uses wildcards, FWIW: https://docs.sandstorm.io/en/latest/administering/wildcard/
<ocdtrekkie> Generally speaking, this is probably the best thing to make sure people who ask about it see.
<ocdtrekkie> As for everything Zarutian said, that's well above my understanding. ;)
taktoa has quit [Ping timeout: 264 seconds]