• fartsparkles@lemmy.world
        link
        fedilink
        arrow-up
        7
        arrow-down
        2
        ·
        4 days ago

        NFS is insecure out of the box so typically tunnelled over TLS (not seen it done over SSH since why bother if there’s SFTP?).

        I’d rather a desktop app or a terminal app for remote file systems than install a kext on a mac. Like, kicking stuff out of the kernel was an excellent idea.

        FUSE would knock over my old mac anytime a transfer was longer than an hour or two. Not to mention the vulnerabilities poorly developed or maintained kexts introduce.

          • 2xsaiko@discuss.tchncs.de
            link
            fedilink
            arrow-up
            2
            ·
            4 days ago

            Eh, works for me for home use. I just have it running on the same machine as the NFS server. The only thing that bothers me is that I can’t use normal Kerberos for SMB, I’d have to set up Samba AD. Boooo

            I even managed to make it work with just mDNS as I’m currently in a horrible network I don’t control.

        • 2xsaiko@discuss.tchncs.de
          link
          fedilink
          arrow-up
          5
          arrow-down
          1
          ·
          4 days ago

          NFS is insecure out of the box so typically tunnelled over TLS

          Set up Kerberos, it will also give you correct file ownership and then you don’t need any additional tunnel.

        • macniel@feddit.org
          link
          fedilink
          arrow-up
          4
          ·
          4 days ago

          for that I then just use VPN/Wireguard if I really need to access my home server remotely off-site.