TRONITY App

[bogga]

Ah, and if you run the docker you get this, which is encouraging

[bogga]

..and as expected the private deployment only allows Tesla's or BMW's to be added.

[londiniumperson]

So as soon as they open source the Honda integration, and update the docker image, I can run it on my home server.. I guess I just lose the fancy iPhone app?

Honda will never release an API, so what you see now is what you'll ever get.
As for no fancy iPhone app, don't worry, the website states that there's a PWA until the Android app is released.

[bogga]

Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

[londiniumperson]

Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

Screen scraping

[bogga]

Honda will never release an API, so what you see now is what you'll ever get.

How are they doing it at the moment then?

Screen scraping

I asked Tronity when the Honda E would be available in the private deployment and the answer was:

[Larbor]

... or via web browser.
The only thing that bothers me is the fact that you have to enter your password for the Honda+ app. It makes sense to me - but you hand over access to the data to this company...

That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

[londiniumperson]

... or via web browser.
The only thing that bothers me is the fact that you have to enter your password for the Honda+ app. It makes sense to me - but you hand over access to the data to this company...

That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

+1 on this matter.
Especially so when the app developers won't/can't do this because this screams to a lack of technical security knowledge/ability or worse still knows that this is a serious security concern but instead prioritises other areas instead.
A company like this that doesn't employ suitable security measures at the application login method certainly won't be considering good practice elsewhere in their infrastructure and is to be avoided at all costs.

[RAL7004]

That is bad security practice. Never hand over your password. In an almost ideal world, Honda would expose an authentication service for third party apps. You log in to Honda and the apps exchange keys. These keys can be revoked at any time by you, the user, and can have permissions attached to them.

If this is not the case here, then do NOT use it.

Absolutely - won't do that either, of course....

[bogga]

TRONITY App, now on Android

https://play.google.com/store/apps/deta ... om.tronity