@heinrich5991 : HTTPS (definitely with S) for the master server list, preferably with all the server infos already (would also make the refresh faster) #1395
14:45
so far nobody implemented it
14:46
several people started i think, but none finished it
what master servers currently do? are they just a directory of game servers which store a basic server info and state like name, game type, current player count, slots, version, restrictions?
Summary
Prevents ip spoofing of (hopefully) any kind:
master server attack (see mailinglist)
server flood attack
session hijacking
faking server info
Protocol change
The new network protocol head...
I was going to make a separate web auth system which pushes authed user ip to a db
linux server on which game server is hosted could fetch that ip to temporaly whitelist it
repeat the process of fetching ips in cronjob -> iptables -> profit(edited)
would be interessierng to use the server password instead a web UI for that, but that would be on game server level, not on the linux iptables level. one confirmation per 24h
several hosts also provide firewalls on their network level. if you update these rules depending on the established connections that would be even better. but no new clients then