For whatever it's worth the Thali project (https://thali.codeplex.com) is using
CBL for Java as a server and we do open it up on the net. But we had to put in
our own security infrastructure (including mutual SSL auth and an ACL
validation mechanism) and we certainly don't think it's ready for public use.
In particular the HTTP stack it uses, TJWS, really makes me nervous. It's an
ancient code base that is built with a custom tool and doesn't seem to get all
that much love. My guess is that at some point we'll have to swap TJWS out with
something a bit more robust like the Apache Listener.
My hope is to eventually get these changes put into the mainline couchbase
rather than our custom forks.
Yaron
________________________________
From: [email protected] <[email protected]> on
behalf of Jens Alfke <[email protected]>
Sent: Tuesday, June 03, 2014 9:51 AM
To: [email protected]
Subject: Re: Android: Multiple apps using the same Couchbase Lite instance
On Jun 2, 2014, at 2:08 PM, Volker Mische
<[email protected]<mailto:[email protected]>> wrote:
I just got a question whether it is possible on Android to have a central
Couchbase Lite instance that holds the data and then independent apps that
access it. For example with using the Android LiteServ (having access through
HTTP would be good enough).
What's the advantage of doing it this way, as opposed to each app using its own
embedded CBL? (That's not a rhetorical question; I know there can be advantages
for certain use cases. For example, to share a very large database without
duplication, or to let apps operate on shared data.)
CBL isn't intended to be a server and I'm a little bit wary of it being used as
one, mostly for security reasons. I don't know if the listener implementation
on Android supports passwords, for example. And it needs to be careful to avoid
binding to network interfaces other than loopback (127.0.0.1) or it'll be
reachable from other devices on the network, which greatly increases the attack
surface.
-Jens
--
You received this message because you are subscribed to the Google Groups
"Couchbase Mobile" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to
[email protected]<mailto:[email protected]>.
To view this discussion on the web visit
https://groups.google.com/d/msgid/mobile-couchbase/4D86C420-47F7-4AD5-9F03-D681249E67C5%40couchbase.com<https://groups.google.com/d/msgid/mobile-couchbase/4D86C420-47F7-4AD5-9F03-D681249E67C5%40couchbase.com?utm_medium=email&utm_source=footer>.
For more options, visit https://groups.google.com/d/optout.
--
You received this message because you are subscribed to the Google Groups
"Couchbase Mobile" group.
To unsubscribe from this group and stop receiving emails from it, send an email
to [email protected].
To view this discussion on the web visit
https://groups.google.com/d/msgid/mobile-couchbase/1401815473765.33917%40microsoft.com.
For more options, visit https://groups.google.com/d/optout.
