On 1/18/2024 4:14 AM, Bradley wrote:
> On 1/17/2024 7:01 PM, Java Jive wrote:
>>> All this security stuff confuses me because I have no need for it.
>>> I don't even have a password or pin on my phone. I don't need it.
>>> Nor do I have a password on my user/admin account on Windows.
>>>
>>> I don't need it.
>>
>> You do.
>>
>>> Not when everything is on my own LAN I don't.
>>
>> You still need to take basic security steps.  Your phone or PC may be stolen, and then likely you're in deep shit, just how deep depending on the abilities of who it ends up in the hands of.
>
> I will do whatever I have to do to get WebDAV working with Android.
>
> But I have to say I'm so confused that I don't know what's the next step.
>
> I already (think I) enabled the Windows native WebDAV server
> 1. But I did that without a specific username/password.
> 2. And I have no idea if the steps I did "created" the certificate.
>
> I need help.
> a. If I need to create a username & password on Windows, I can do that.
> b. If I need to create a certificate on Windows, I probably can do that.
>
> Can you help me?
>
> What do I need to do next just to make sure the Windows WebDAV server is
> working (with or without Silent Notes on Android and/or on Windows)?
>
> Please just tell me what I need to do next because I'm not at all sure if
> the Windows WebDAV server is working (so there's no point in trying to get
> Silent Notes to work with it until I can get Windows WebDAV working).
>
> What do I need to do in order to set up Windows WebDAV the way you suggest?

You know it's on port 80 and 443.

Some clients might decide to only use 443.

Find a client that works on either Port,
then select Port 80 and do a functional
test of the WebDAV feature.

You can work yourself into a security lather later.

If you can't even get it to work on Port 80, it's
going to be pointless working on certificate.

But the thing is, the job isn't done properly,
unless 443 works, and SSL/TLS is working or whatever.

The reason for doing that bit, is for clients which
are grumpy and inflexible. There will always be software
out there, which is like that.

The server itself, could have settings for port numbers,
and for all I know, the server itself may deny port 80
entirely, and insist on a certificate-laden port 443 only.

That's why you need a relatively dumb test client,
to check port responses and so on.

Prove the protocol works with *something* first, then
build on that success.

Paul

Martin Stoeckli wrote:

> SilentNotes does not need it and the repository will be encrypted
> anyway, regardless of whether you use http:// or https://

Do the .silentnotes file(s) require any particular MIME type?

Andy Burns wrote:

> It's worked twice for me, then each time has broken afterwards

OK, when I thought it was working, the tablet was only able to upload,
unable to download, fixed that by adding a MIME type inside IIS.

So SilentNotes is working for me with Win11Home+IIS (without SSL so
password is transmitted in clear, will try adding a self-signed cert).

also realized the "folder browsing" option isn't needed.

On 1/18/2024 6:41 AM, Bradley wrote:
> On 1/18/2024 1:47 AM, Andy Burns wrote:
>>> Do I need to create a certificate for a WebDAV server on Windows
>>
>> As far as windows is concerned, no; but SilentNotes might insist on it
>
> Does anyone else NOT see the Silent Notes' developer's comments on this thread?
> 1. https://groups.google.com/g/comp.mobile.android/c/URMgMHvb5ls/m/orJgqYaCAgAJ
> 2. https://groups.google.com/g/comp.mobile.android/c/URMgMHvb5ls/m/p90Y4YcfAwAJ
> 3. https://groups.google.com/g/comp.mobile.android/c/URMgMHvb5ls/m/VdavXvUkAwAJ

Martins posts are to comp.mobile.android only.

Perhaps GG removes cross-posts, before POST ?

Or Martin set it that way ?

http://al.howardknight.net/?STYPE=msgid&MSGI=%3C841de574-0340-4f95-8b50-20c555f10271n%40googlegroups.com%3E

Paul

Paul wrote:

> Martins posts are to comp.mobile.android only.
>
> Perhaps GG removes cross-posts, before POST ?
>
> Or Martin set it that way ?
>
> http://al.howardknight.net/?STYPE=msgid&MSGI=%3C841de574-0340-4f95-8b50-20c555f10271n%40googlegroups.com%3E

The Android newsgroup is about 1000 spams to one real post without
filtering out all the Google Groups posts. So it's unusable without
deleting all the Google Groups posts (which only started happening about a
month or two ago at this huge level - although it slowly ramped up).

But I don't know how posting with Google Groups to Usenet works (and it
probably won't matter in a month anyway).

Even so, I'm guessing Martin Stoeckli probably couldn't post to the two
Windows newsgroups because they're not archived by Google Groups.

That's also maybe why the thousand to one spams is not happening on the
Windows ngs.

As a separate complaint, I don't know why Google lets so many spammers spam
using their accounts. You'd think Google, of all companies, would know a
robot from a human, especially as it requires a Google account to do it.

On 1/20/2024 6:20 PM, Indira wrote:
> Paul wrote:
>
>> Martins posts are to comp.mobile.android only.
>>
>> Perhaps GG removes cross-posts, before POST ?
>>
>> Or Martin set it that way ?
>>
>> http://al.howardknight.net/?STYPE=msgid&MSGI=%3C841de574-0340-4f95-8b50-20c555f10271n%40googlegroups.com%3E
>
> The Android newsgroup is about 1000 spams to one real post without
> filtering out all the Google Groups posts. So it's unusable without
> deleting all the Google Groups posts (which only started happening about a
> month or two ago at this huge level - although it slowly ramped up).
>
> But I don't know how posting with Google Groups to Usenet works (and it
> probably won't matter in a month anyway).
>
> Even so, I'm guessing Martin Stoeckli probably couldn't post to the two
> Windows newsgroups because they're not archived by Google Groups.
>
> That's also maybe why the thousand to one spams is not happening on the
> Windows ngs.
>
> As a separate complaint, I don't know why Google lets so many spammers spam
> using their accounts. You'd think Google, of all companies, would know a
> robot from a human, especially as it requires a Google account to do it.

GG did actually put a Captcha in the interface, but they
were not being serious about it. And it's a joke. It's the
kind of activity that advertises "we never really cared, if you noticed".
That's what their current Captcha says.

They could have obliterated the spam using Bard, but, they didn't bother.
Once the spammers discovered they weren't getting in, the flood level
would drop considerably. By using Bard, it would have tamped down
the circus atmosphere in ThaiSpam country (gambling-associate spam).

But other administrators have taken similar nuclear approaches.
When there was a flood on a certain USENET server, the admin
set the server to read-only and just walked away. Done.
"If the users can't behave, fuck'em." That's certainly
a solution. And it's 100% functional. No need to de-peer the
dude, because no garbage will ever come from his server
ever again. It's possible two server operators may have done that,
got abused, admin tossed in towel and switched off posting.

And yes, the alt Windows groups not being in GG, is a blessing.
Who knew, at the time.

Paul

Bradley wrote:

> I will do whatever I have to do to get WebDAV working with Android.

Did you get this working?

On 1/22/2024 3:00 AM, Andy Burns wrote:
>> I will do whatever I have to do to get WebDAV working with Android.
>
> Did you get this working?

Not yet. But mostly I'm a deer in the headlights, not knowing where to go.

I am confused in a few ways where I just want a SIMPLE solution.
The simplest possible.

99 out of 100 times that means no security (just to prove it's working).
But I don't want to argue about security as people spent too much time on
that since I don't really care if I have to ADD it just to get it to work.

What's confusing is nobody has ever gotten the WebDAV server that comes
with Windows to work based on the responses to date, so that's an issue.

Even Martin Stoeckli said the people he deals with use a "Nextcloud
instance", whatever that means.

It's crazy that nobody has ever used the native Windows 10 WebDAV server so
that's really the very first thing I need to get to work all by itself.

I don't care about the security. If I have to add a user, I'll add a user.
If I havef to give that user a password, I'll do that. If I hve to create a
certificate, I'll do that too. But that can't be all there is to setting up
a Windows 10 WebDAV server so it's a waste of time just thinking about it.

My main care is that I can set up the native Windows WebDAV server to
connect to that WebDAV server to test that it's working. Until that
happens, there's no sense even bringing Silent Notes into the equation.

I'm stuck because there's no explanation anywhere on the net on just
getting the native Windows WebDAV server to connect to itself somehow.

Bradley wrote:

> Andy Burns wrote:
>
>> Did you get this working?
>
> Not yet.
>
> What's confusing is nobody has ever gotten the WebDAV server that comes
> with Windows to work based on the responses to date, so that's an issue.

You may have missed my replies where I showed how to get it working, in
summary ...

control panel/programs and features, turn features on/off

under iis, tick all of
web management/iis management console
www services/common http features/webdav publishing
www services/security/basic authentication

Then do each of the following within the "Default web site"

under webdav authoring rules, enable webdav, add an authoring rule for
all content, and your windows username with read+write permissions

in webdav settings, allow anonymous property queries

under authentication, enable basic authentication

under MIME types, add an entry for
..silentnotes
of type
application/silentnotes

====

from SilentNotes app click the cloud icon
webDAV
http://aa.bb.cc.dd/
user=yourusername
pass=yourpwd

on the IIS machine, you'll see a file appear...

"C:\inetpub\wwwroot\silentnotes_repository.silentnotes"