Not OP, but I don’t expose my jellyfin to the internet because of the rough edges and its age. It hasn’t been around long enough for me to trust it. It’s probably fine. I’m just not ready yet.
I barely expose my Plex server to the internet. Both are pretty seriously firewalled, and my jellyfin is only visible outside via tailscale.
I try a lot of stuff that’s a lot younger than Jellyfin but I respect your position on it. From what I’ve read the most serious identified issue will allow unauthorized playback, but one requirement for the exploit is knowing the local system path for the media. It forked from emby somewhere around 8 or so years back and I managed to trust emby back then so maybe I’m being a bit overly naive.
My main issue with Plex is that it only supports using its auth servers so when their having an outage, so am I; I’d rather control the media server and it’s IdP.
Not OP, but I don’t expose my jellyfin to the internet because of the rough edges and its age. It hasn’t been around long enough for me to trust it. It’s probably fine. I’m just not ready yet.
I barely expose my Plex server to the internet. Both are pretty seriously firewalled, and my jellyfin is only visible outside via tailscale.
I try a lot of stuff that’s a lot younger than Jellyfin but I respect your position on it. From what I’ve read the most serious identified issue will allow unauthorized playback, but one requirement for the exploit is knowing the local system path for the media. It forked from emby somewhere around 8 or so years back and I managed to trust emby back then so maybe I’m being a bit overly naive.
My main issue with Plex is that it only supports using its auth servers so when their having an outage, so am I; I’d rather control the media server and it’s IdP.
I honestly have never noticed an outage of that type, and wasn’t aware. Good to know.
I maintain both Plex and jellyfin on the same servers at the same time because honestly neither is a full solution that I’m happy with. 😥