Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Expand
titleExpand

BrightSign does not initiate any contact with BrightAuthor:connected or players. Users initiate connections, send requests, or subscribe to events, and the server replies. There are no cases when a server sends a request to a player, which would be impossible in most cases anyway since players are behind firewalls/gateways.

How can we identify HTTP calls on port 80 from

...

the middleware vs. calls from elsewhere?

Expand
titleExpand

Only two server endpoints listen on TCP port 80 and do not require transport-level encryption (as described on this page):

  • time.brightsignnetwork.com

  • services.brightsignnetwork.com

The first is an NTP server and has other endpoints as well, and second is used only to check the connection with the cloud at the early stages of the BOS boot. In both cases, it is impossible to use TLS because the handshake and certificate validation are possible only when boot is finished and the player's clock is initialized correctly.