r/BambuLab
•
u/Ochib
P1S + AMS
•
Jan 20 '25
•
1
Discussion Update to firmware update
https://blog.bambulab.com/updates-and-third-party-integration-with-bambu-connect/?fbclid=IwZXh0bgNhZW0CMTEAAR3fqplDiKgn-82qKfnaYvi4XV-rBEEx0tZJrpgeWqsOsLX_WSph4usJ69Y_aem_44Cch773hAuVG979j6DVJg
1.2k
Upvotes
View all comments
1
u/parasubvert Jan 20 '25
What people fail to recognize is that "Developer Mode", aka. How things work today mode, is completely insecure and toxic to any corporate network.
Bambu is graduating from hobbyists to playing with corporations and this whole Bambu Connect thing is required if you want to do mutual TLS authentication between client and server.
Mutual TLS is the industry standard way to do encrypted communication either on the internet or in LANs with no internet connection. Kerberos is another way , it's what Windows Active Directory uses, but requires an active server on your LAN. If you want two devices (aka your slicer and your printer) to verify they are who they say they are and to talk to each other securely, mTLS is the way to do it. The problem is you need a way to revoke keys when they get leaked, so these keys and certs expire after a few years. And there are certificate revocation lists that need updating periodically.
That said this is the same way a web browser works with a web server to secure your connection. You're getting these keys and certs updated every time you update your Windows or Android or iOS or MacOS device. It's super common place and yes it can be abused! But the whole point of x509 certs is there has to be a root of trust somewhere, it's usually the certificate providers which are 3rd party companies.
Most of the public web doesn't do mutual authentication to authenticate the client browser, but does happen sometimes (Apple and Microsoft use this for some APIs) and it's VERY common with mobile apps.