Hacker News Reader

Comment by mitchellh | Hacker News Reader

Vagrant Share has avoided this issue but putting a reasonably short time limit on any given share unless you pay. Vagrant Share is completely free, but your share stops routing after 4 to 8 hours. You can just request a share again immediately but the name will be completely different.

We see many shares per day and haven't had this issue. Would this work for ngrok?

View on HN

This is by far the most common suggestion that's been suggested to me that I hadn't considered before. I like it a lot, and I wouldn't be surprised if I ended up implementing this.

Another possible alternative I'm considering is to force all non-paying tunnels to use http authentication which would greatly reduce the utility to phishers and the like.

A lot of phish already use HTTP auth.

    http://legitimate:www.bankofpaypai.com@460fc73627.ngrok.sexy

Plus, adding HTTP auth would totally fudge every tunneled app using HTTP auth for itself.

Reply on news.ycombinator.com