The KinGuard Project

<t>Currently even if the OPI device has proper IPv6 globally routable address, the op-i.me name created for the device only has IPv4 address. I did verify that my OPI device did get IPv6 address and that IPv6 address pingable from outside, but unfortunately the https service is not running on the IP...

<t>It would be nice if the error handling of the setup.op-i.me would be bit better. First of all, there was no easy way to rerun the tests. My original setup had some ports blocked, so I fixed my setup and tried to press the "Start setup" again to start testing again, but that did nothing. I did get...

<t>You should add TLSA records (i.e. DANE records RFC6698) for the opi names. I.e. while adding the opiname.op-i.me name to the DNS, you should add TLSA 3 1 1 records for it too. It seems you do generate unique private key for each device, and sign that by your internal CA, so that would allow makin...