There’s still a bunch of outstanding API security issues last I checked, so it’s not secure enough for me to open to the web.
Teaching friends and family to use it with a VPN is a whole another can. Also, you’ll have to make sure the VPN is secure and users don’t have access to the rest of your network…
and then you’ll have to deal with client apps/access for mobile, android boxes, TVs, and Chromecasts…
I got lucky with the Plex Pass too so I can only ride this out to the end until Jellyfin catches up. (also, I’m not good to contribute code)
Lot’s of things have been fixed but theres still much to do. The issue was broken down to smaller issues for tracking and I check back every once in a while.
Even if there were no security issues, exposing jellyfin is also another can… choice of:
open up ports
cloudflare (and potential ban for video content on the free tier, even if caching is disabled)
I think the difference is Plex offers a web address you can use for logging into Plex and for sharing it with others. So, you get a friendly admin interface with oauth for logging in from other popular services as the Plex user getting setup.
There’s still a bunch of outstanding API security issues last I checked, so it’s not secure enough for me to open to the web.
Teaching friends and family to use it with a VPN is a whole another can. Also, you’ll have to make sure the VPN is secure and users don’t have access to the rest of your network…
and then you’ll have to deal with client apps/access for mobile, android boxes, TVs, and Chromecasts…
I got lucky with the Plex Pass too so I can only ride this out to the end until Jellyfin catches up. (also, I’m not good to contribute code)
Any particular API security issues? Never considered exposing Jellyfin, but can certainly understand how it simplifies access.
This was the security report from awhile back:
https://github.com/jellyfin/jellyfin/issues/5415
Lot’s of things have been fixed but theres still much to do. The issue was broken down to smaller issues for tracking and I check back every once in a while.
Even if there were no security issues, exposing jellyfin is also another can… choice of:
Don’t you have to open a port for Plex remote access?
I think the difference is Plex offers a web address you can use for logging into Plex and for sharing it with others. So, you get a friendly admin interface with oauth for logging in from other popular services as the Plex user getting setup.
You do not but you’ll be severely bandwidth limited. It’ll go through their servers if a port can’t be opened.
Oh I forgot about that option
That sounds like you do have to open one then? Otherwise you are “severely bandwidth limited” and who wants that?
https://sh.itjust.works/comment/25489149