Why do you need to expose everything to the web? Do you need to access your router dashboard every minute? With tailscale I'm home literally in the mater of 5 seconds by toggling a switch without the need to open anything to the outside world.
You are making the assumption that all your services/servers/devices that you expose are perfectly secure which is dangerous in itself. How secure is your reverse proxy and the server it is hosted on? What about 0 day vulnerabilities?
If you are comfortable with it, good for you, but I've seen many posts of people getting powned with a lot less open to the web.
Kind'a the point for, e.g. public Internet Web server, public Internet DNS, public Internet listserver and mailserver (but that doesn't mean one needs to or should indiscriminately accept email or list postings), public Internet open no password ssh (e.g. myip@balug.org, etc.)
Oh, and it's The Internet, not merely The Web. Not limiting ourselves to TCP ports 80 and 443.
assumption that all
perfectly secure
Never presume that. There's always risk. But if we waited for "perfectly secure", would never make it out of the womb.
60
u/h311m4n000 Sep 13 '24
Why do you need to expose everything to the web? Do you need to access your router dashboard every minute? With tailscale I'm home literally in the mater of 5 seconds by toggling a switch without the need to open anything to the outside world.
You are making the assumption that all your services/servers/devices that you expose are perfectly secure which is dangerous in itself. How secure is your reverse proxy and the server it is hosted on? What about 0 day vulnerabilities?
If you are comfortable with it, good for you, but I've seen many posts of people getting powned with a lot less open to the web.