From 02ac1fb9cb98cab72676af3636fbdc7eee129b7e Mon Sep 17 00:00:00 2001 From: Tom Wilkie Date: Mon, 30 Nov 2015 09:51:24 +0000 Subject: [PATCH 1/2] Add basic security warning. --- README.md | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/README.md b/README.md index 0751fe1974..b988d4728c 100644 --- a/README.md +++ b/README.md @@ -28,8 +28,12 @@ boot2docker, replace localhost with the output of `boot2docker ip`.) ## Requirements Scope does not need any configuration and does not require the Weave Network. -But Scope does need to be running on every machine you want to monitor. +Scope does need to be running on every machine you want to monitor. +Scope allows anyone with access to the UI control over your containers: as +such, the Scope app endpoint (port 4040) should not be made accessible on +the Internet. Whats more, probe <-> app traffic is currently insecure and +should not traverse the internet. ## Architecture From 51cc3331397c862ebc47808a7d887624186a7d07 Mon Sep 17 00:00:00 2001 From: Tom Wilkie Date: Tue, 1 Dec 2015 10:47:34 +0000 Subject: [PATCH 2/2] Review feedback --- README.md | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/README.md b/README.md index b988d4728c..2855233e4b 100644 --- a/README.md +++ b/README.md @@ -32,8 +32,8 @@ Scope does need to be running on every machine you want to monitor. Scope allows anyone with access to the UI control over your containers: as such, the Scope app endpoint (port 4040) should not be made accessible on -the Internet. Whats more, probe <-> app traffic is currently insecure and -should not traverse the internet. +the Internet. Additionally traffic between the app and the probe is currently +insecure and should not traverse the internet. ## Architecture