Page 5 of 7

Re: Manual Emby Login with https

Posted: 30 Jan 2019, 16:11
by Ivan_Toniolli
Montoya wrote:
Ivan_Toniolli wrote:
30 Jan 2019, 11:33
I want to use a tried and tested method to give https access to my internal library to friends and family using MrMC.
You can read all about tried and tested methods here:
https://emby.media/community/index.php? ... nnections/

If you have read all the pages in that topic, than your eyes will look like this :shock:
:D ;)
Interesting thread, but MrMC is not mentioned in that thread.
Can you connect directly to an internal plex server using SSL and MrMC without going through the Plex network?

Sent from my SM-A520F using Tapatalk


Re: Manual Emby Login with https

Posted: 30 Jan 2019, 16:58
by Ivan_Toniolli
Also there doesn't seem to be a way to turn off transcoding on Plex. That's not ideal. I'm just playing a 1080p bdrip which would direct play in the browser and I get 40% spikes CPU usage on my Intel Core 2 quad CPU @2.833 GHz unraid server. On Emby I can turn off transcoding at user level.

Sent from my SM-A520F using Tapatalk


Re: Manual Emby Login with https

Posted: 30 Jan 2019, 17:12
by Ivan_Toniolli
But I'm guessing if all the clients use MrMC, then there will be no transcoding. I'll do some testing.

Sent from my SM-A520F using Tapatalk


Re: Manual Emby Login with https

Posted: 30 Jan 2019, 19:39
by Montoya
You can use the blogpost I mentioned earlier.

Never needed external Emby access, but when I'm on holiday with my family, it's nice to have Emby access over https now. So I registered a free domain today, setup free Cloudflare account, setup pxf certificate, setup router and Emby and now the name servers have just updated for the domain to use Cloudflare DNS. Good to know that Cloudflare is in between, as protection against potential script kiddies :D

Setup MrMC 3.8.0 to use https and yes it works flawlessly, just entering domain name, port and Emby user/pass with manual sign-in. So there you have a it, tried and tested, all with info from blogpost ;)

Re: Manual Emby Login with https

Posted: 30 Jan 2019, 23:11
by timstephens24
I just did similar. I haven't used Emby outside of my house, but all I needed to do was set up a reverse proxy and add a CNAME record to my Cloudflare DNS. I tested that it worked with manual sign-in with Emby on my phone on the cell network, so yeah emby with manual login with https seems to work great.

Re: Manual Emby Login with https

Posted: 30 Jan 2019, 23:21
by Ivan_Toniolli
Montoya wrote:You can use the blogpost I mentioned earlier.

Never needed external Emby access, but when I'm on holiday with my family, it's nice to have Emby access over https now. So I registered a free domain today, setup free Cloudflare account, setup pxf certificate, setup router and Emby and now the name servers have just updated for the domain to use Cloudflare DNS. Good to know that Cloudflare is in between, as protection against potential script kiddies :D

Setup MrMC 3.8.0 to use https and yes it works flawlessly, just entering domain name, port and Emby user/pass with manual sign-in. So there you have a it, tried and tested, all with info from blogpost ;)
Sounds promising, I will give it a go! In the meantime I setup plex and imported the movies without reading the date added in the xml files, so the latest movies display is totally random. No genres info either. I'll keep testing both. Has 3.8 been released now

Sent from my SM-A520F using Tapatalk


Re: Manual Emby Login with https

Posted: 31 Jan 2019, 06:25
by Ivan_Toniolli
I must correct myself. Genres / recently released / years / actors and many others work with Plex

Sent from my SM-A520F using Tapatalk



Re: Manual Emby Login with https

Posted: 31 Jan 2019, 16:49
by Ivan_Toniolli
Tested Plex using MrMC from my phone, able to connect fine, accessing genres as well.

Also this article seems to indicate that even when connecting through Relay streaming will continue to be secure and encrypted. (When using secure connections, the content is encrypted end-to-end and tunneled through our Relay. The connection is not terminated on their servers and only the origin Plex Media Server has the certificate.)


https://support.plex.tv/articles/216766 ... ugh-relay/

Getting access to genres is enough for me to move across I think. I will setup a parallel library and then fix the date added problem.

Sent from my SM-A520F using Tapatalk


Re: Manual Emby Login with https

Posted: 31 Jan 2019, 20:13
by Montoya
Ivan_Toniolli wrote:
31 Jan 2019, 16:49
Tested Plex using MrMC from my phone, able to connect fine, accessing genres as well.
It's only the Emby Client Service that still needs some TLC from MrMC devs. Plex users have it all in MrMC.
Ivan_Toniolli wrote:
31 Jan 2019, 16:49
Also this article seems to indicate that even when connecting through Relay streaming will continue to be secure and encrypted. (When using secure connections, the content is encrypted end-to-end and tunneled through our Relay. The connection is not terminated on their servers and only the origin Plex Media Server has the certificate.)
https://support.plex.tv/articles/216766 ... ugh-relay/
Have you read this, regarding to Relay streaming:
Limitations

When relaying a connection through us, there are limitations for the streaming qualities you can use:

- Free users are limited to 1 Mbps maximum for streams
- Plex Pass subscribers are limited to 2 Mbps maximum for streams
The tech guys at Emby forum are not very fond how Plex does things, but maybe some things have changed already now in 2019:
You cant really compare this to Plex. to me Plex is insecure. How Plex works is it acts like a man in the middle attack. So you open a browser and connect to your plex server. the Data goes from you, to the plex servers (SSL connection). Plex then sees your username/password, IP details, headers etc. From here your data is sent from the plex servers to your plex server in sort of plain text and not over a SSL connection. The websocket is then opened from your plex server directly to your web browser. From what i can gather this isnt over SSL.

Every bit of data you send over your SSL connection to Plex is actually decrypted by their servers before being sent on. So in theory they could snoop on it. i.e. man in the middle attack

There is an option in Plex to use your own certificates. If you use your own then the data is encrypt as only you have the key/crt combo and plex cant man in the middle it. Adding your own cert is exactly the same as emby, knowledge/skill wise.
https://emby.media/community/index.php? ... ntry569086

I don't know Plex well (have it installed but not using it), so maybe MrMC devs can tell something about this issue ?

Re: Manual Emby Login with https

Posted: 01 Feb 2019, 06:25
by Ivan_Toniolli
https://emby.media/community/index.php? ... ntry684171

This guy seems to know what he is talking about. Interesting thread, opinions are all over the place in it though, lol.

Sent from my SM-A520F using Tapatalk