You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
To support local API access in Home Assistant, we need to disable certificate validation on a per-session basis.
Even if disabling it globally is supported, this would open the ecosystem to harmful attacks and is not an option.
Hence, to re-use Home Assistant HTTP client management, we must determine if disabling certificate validation is possible.
Additionally, to enhance security, it would be beneficial to disable certificate validation only during the first connection and then perform certificate pinning for further connections. However, this is a second priority because local access already provides a better security encapsulation regarding man-in-the-middle attacks.
The text was updated successfully, but these errors were encountered:
According to https://github.com/hella-info/onyx_api/tree/master?tab=readme-ov-file#local-access, ONYX.Center supports local API access.
The corresponding feature request in the client library is muhlba91/onyx-client#275.
To support local API access in Home Assistant, we need to disable certificate validation on a per-session basis.
Even if disabling it globally is supported, this would open the ecosystem to harmful attacks and is not an option.
Hence, to re-use Home Assistant HTTP client management, we must determine if disabling certificate validation is possible.
Additionally, to enhance security, it would be beneficial to disable certificate validation only during the first connection and then perform certificate pinning for further connections. However, this is a second priority because local access already provides a better security encapsulation regarding man-in-the-middle attacks.
The text was updated successfully, but these errors were encountered: