Is all my spotify-data routed via mysqueezebox.com to my devices, or is it just used for login / authentication etc.? I am a bit concencerd, because all communication on mysqueezebox.com is plain http (no HTTPs) as far as I can see.
The situation has become a little more complicated than it used to be. But here's what it is:
- the Spotify credentials you enter on mysb.com are encrypted, then sent to the player for further use (streaming). Spotify has been of the first to be pretty picky about encryption etc.
- with the new implementation the music browsing no longer relies on username/password, but uses Spotify's oauth authentication. No username/password is exchanged between your LMS, player, mysb.com and Spotify. That's why you now get a Spotify dialog asking you for permissions you have to grant us. All critical communication is between you and Spotify directly. We then get a token from Spotify which allows us to query their API in your name.
-- Michael _______________________________________________ squeezenetwork mailing list [email protected] http://lists.slimdevices.com/mailman/listinfo/squeezenetwork
