yoda_machine
I am using :gen_tcp to send raw data between peers. How secure is gen_tcp? Do I need to add an extra security layer on top of what gen_tcp currently provides?
Where Next?
Trending in Questions
Other Trending Topics
Latest on Elixir Forum
Sponsor Spotlight
Elixir, Erlang & messaging conferences from Code Sync. Next up: ElixirConf US (10–11 Sep) & Code BEAM Europe (21–22 Oct), Haarlem + online.
Categories:
Sub Categories:
Forums
Popular Tags
- #ecto
- #liveview
- #troubleshooting
- #learning-elixir
- #library
- #deployment
- #erlang
- #testing
- #genserver
- #mix
- #absinthe
- #remote-other
- #otp
- #plug
- #how-to-question
- #macros
- #postgres
- #elixirconf
- #channels
- #exunit
- #discussion
- #code-sync
- #podcasts
- #javascript
- #onsite
- #dialyzer
- #docker
- #authentication
- #umbrella
- #full-time-contract
- #podcasts-by-brainlid
- #ecto-query
- #elixirconf-us
- #ai
- #blog-post
- #elixir-ls
- #phoenix_html
- #iex
- #graphql
- #genstage
- #websockets
- #supervisor
- #advent-of-code
- #distillery
- #processes
- #api
- #forms
- #metaprogramming
- #hex
- #security
Our Sponsors
Build Elixir applications with speed and confidence.
We build reliable cloud platforms for business-critical systems.
Catch errors, track performance, monitor hosts and more.
Error tracking, logs, uptime, and Just Enough APM. Built for developers.
Elixir, Erlang & BEAM conferences from Code Sync - join us in 2026!
Bringing learning, work and compliance together since 1987.
Producing high quality Elixir screencasts since 2017.
The deployment platform built for Elixir: PaaS ease, VPS control.
The team behind Membrane, Popcorn, LiveDebugger. Available for hire.
Courses that'll move you from confusion to "Aha, now I get it!"
Showing Posts 1 to 10- Show Best Posts
- Show All (oldest first)
- Show All (newest first)
OvermindDL1
:gen_tcpfulfills the TCP standard very well, what do you means how secure? Like no buffer overflow packet handling or so? It’s not susceptible to those things, so what are you meaning?yoda_machine
I am sorry I am new here. I guess I should have phrased my question better.
What I meant was would gen_tcp handles file corruption, data encryption, … Or do I need to implement those things myself?
OvermindDL1
There’s no file’s for TCP communication. However TCP itself is a reliable protocol, it already tries to prevent corruption for data transferred.
This is a layer above TCP, not TCP itself. This would be like ssl, so look at
:gen_ssl, which it itself runs on top of:gen_tcp.NobbZ
TCP does not know about files or encryption by itself, so you need to implement another transfer protocol on top that suites your needs.
TCP only saves you for packet loss as it will rerequest packages that are missing from a sequence. AFAIR also packages are checksummed but I’m not sure about that one…
Nevertheless,
gen_tcpwon’t give you magically more or better guarantees that TCP would give you.yoda_machine
Thank you @NobbZ and @OvermindDL1! Any suggestion on what I should do to implement a secure file transferring?
hauleth
Use
sshmodule if you can and setup SSH server on the other end. In that way you will not need anything extra.OvermindDL1
Depends on what you are transferring to or from?
If it’s multiple local erlang nodes, could just use the standard distribution, if it’s remote erlang nodes then standard distribution over an SSH tunnel. Honestly I’d just use
:ssh_sftpregardless of what it is, or a web server.yoda_machine
Unfortunately, I can’t do an
ssh. I am doing a P2P file transfer between untrusted devices.OvermindDL1
SSH works just fine for that, one connects to the other, they just host a little ssh thing and the other connects and transfers what it needs fully encrypted.
yoda_machine
Thank you! I will try it out!