Digital Signature-less Software

Don't miss a thing. Post your questions and discussion about other uncategorized NAS features here.
Locked
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Digital Signature-less Software

Post by danno321 »

I use Logitech Media Server 8.2. For it to run I have to ENABLE 'Allow installation of applications without a digital signature.' This obviously degrades security. Would implementing a Whitelist for these apps work, or would that open a can of worms?
TS-251A 2017 (previously TS-239 Pro 2009).
Mousetick
Experience counts
Posts: 1081
Joined: Thu Aug 24, 2017 10:28 pm

Re: Digital Signature-less Software

Post by Mousetick »

danno321 wrote: Fri Apr 30, 2021 8:47 pm I use Logitech Media Server 8.2. For it to run I have to ENABLE 'Allow installation of applications without a digital signature.' This obviously degrades security. Would implementing a Whitelist for these apps work, or would that open a can of worms?
Not that I can think of. Sounds like a good idea. Security settings should be on by default but allow exceptions. The global on/off switch inevitably results in an insecure configuration. You may want to suggest this improvement to QNAP (open a service ticket), although I'd bet they'll respond by telling you it's Logitech's problem, not theirs.
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Digital Signature-less Software

Post by danno321 »

Logitech destroyed the Slim Devices. The open source software is now only supported by volunteers. It used to be an official QNAP PKG.
TS-251A 2017 (previously TS-239 Pro 2009).
danno321
Know my way around
Posts: 179
Joined: Fri Aug 07, 2009 1:36 am

Re: Digital Signature-less Software

Post by danno321 »

The feature request has been submitted.
TS-251A 2017 (previously TS-239 Pro 2009).
Locked

Return to “Miscellaneous”