32
I aked a company for API access and they asked for IPs to whitelist (lemmy.world)
submitted 3 months ago by to c/homeassistant@lemmy.world
32 comments fedilink hide all child comments
 

How do I find out what IPs to give, my IP doesnt stay the same? The local IP is hardly the one they want, it wouldnt make sense I think.

you are viewing a single comment's thread
view the rest of the comments
[–] 18 points 3 months ago (3 children)

First of all they’re fucking doing it wrong. Manual IP whitelisting instead of API auth is appallingly dated

  • permalink
  • fedilink
  • source
  • hideshow 3 child comments
    •
  • [–] 7 points 3 months ago (2 children)

    why would one do either? By whitelisting you entirely prevent traffic. API auth takes processing. How wrong is it? Maybe for your home usage it’s good enough but layering measures has value…

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 2 child comments
    •
  • [–] 4 points 3 months ago (1 child)

    It means you’re doing boutique instead of scalable, and/or they don’t know how to deal with the traffic and auth infrastructure

  • permalink
  • fedilink
  • source
  • parent
  • hideshow 1 child comment
    •
  • [–] 1 point 3 months ago

    scalable has cost and you only want to engage costs when it comes with benefits. Preventing non legitimate traffic is complementary to scalability. Just don't pay for illegitimate traffic...

  • permalink
  • fedilink
  • source
  • parent