In this answer, it is suggested that it is not safe to use --wsorigins="*" for security reasons. What are the security reasons?

=> How could I make WS-RPC server connection secure in geth?

If I use following flags, would it be enough for security: --ws --wsaddr="" --wsorigins "*"; where I have replace -wsaddr="" with -wsaddr="" in order to connect only from localhost.

--wsaddr value WS-RPC server listening interface

--ws Enable the WS-RPC server

--wsorigins value Origins from which to accept websockets requests

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.