• Resolved steffen.coco

    (@steffencoco)


    Hi,

    I’m trying actually to activate the JetPack PlugIn in one of our WP installations. Now I’m getting the error

    The Jetpack server was unable to communicate with your site [HTTP 403].

    That’s coming because our xmlrpc interface is blocked by apache httpd (because of BruteForce attacks). Now I must open the xmlrpc interface and reconfigure the apache configuration or configure a new fail2ban rule for xmlrpc or anything else.

    But the point is: Why must have Jetpack/www.ads-software.com an active access to our WP server (over xmlrpc)?!? What is the benefit of that? It’s seem’s to me a little suspect, that there is a (external) thing which have access to the web pages / posts of our server.

    Thanks and regards,
    Steffen

    https://www.ads-software.com/plugins/jetpack/

Viewing 4 replies - 1 through 4 (of 4 total)
  • Plugin Author Jeremy Herve

    (@jeherve)

    Jetpack Mechanic ??

    Why must have Jetpack/www.ads-software.com an active access to our WP server (over xmlrpc)?

    www.ads-software.com doesn’t need access. Jetpack, on the other hand, does. The Jetpack plugin uses your site’s XML-RPC file to communicate with WordPress.com. The plugin was built to hook into WordPress.com’s infrastructure, and thus allow you to offload things like stats calculations, Related Posts algorithms, subscription management, or image optimization. WordPress.com takes care of that for you, but it obviously needs to continuously communicate with your site to do that. Every time you publish a new post, your site and WordPress.com communicate via XML-RPC, allowing subscription emails to be sent from WordPress.com, updates to be posted on your favorite Social Networks by WordPress.com, stats to be recorded for that new post, and several other things.

    You can learn more about the different modules in Jetpack here:
    https://jetpack.me/

    Thread Starter steffen.coco

    (@steffencoco)

    Thanks for your answer ??

    All you have written indicates that there is a communication in the direction from JetPack plugin to WordPress.com: There is a new post, the JetPack plugin sends anything to wordpress.com and gets an answer. To do that you need a (public) interface on the wordpress.com side. But my question is: why must I open an interface on the side of the jetpack plugin?!? That sounds like if the wordpress.com server contacts the wordpress/jetpack installation. That’s for me the wrong direction …

    On the other hand I don’t know if it’s needed to send post data to wordpress.com for calculating statistical data, do image optimizations and subscription management and so on. All these things can be also done by the wordpress (JetPack plugin) installation by self.

    One of the few things for sending data to wordpress.com is for me spam and virus protection of posts and attachments.

    The functionality of the JetPack plugin is very good and very comprehensive. It’s probably one of the best plugins for WP. But I really don’t know if the use of this plugin can be recommended.

    Thanks and regards,
    Steffen

    Plugin Author Jeremy Herve

    (@jeherve)

    Jetpack Mechanic ??

    The communication indeed goes both ways. When your site sends some information, it authenticates first, and WordPress.com replies back by asking your site for information to make sure the communication can be trusted.

    Some of the Jetpack modules also explicitly post new data to your site. The Manage module does, for example, as well as Post By Email, Comments, or Protect.

    don’t know if it’s needed to send post data to wordpress.com for calculating statistical data, do image optimizations and subscription management and so on. All these things can be also done by the wordpress (JetPack plugin) installation by self.

    Doing such things on your own server is possible, but it’s also quite resource-heavy. Jetpack was built to allow you to offload those resources to WordPress.com.

    I hope this helps clarify things.

    Thread Starter steffen.coco

    (@steffencoco)

    Hi Jeremy,

    thanks for your informations.

    Greetings,
    Steffen

Viewing 4 replies - 1 through 4 (of 4 total)
  • The topic ‘Why need JetPack/worpress.org XML access to my page?!?’ is closed to new replies.