Why the desktop app never opens a port on your computer

Many remote tools work by opening a port on your computer so a server can reach it. CodeStilt doesn't. Nothing on the internet can connect in to your computer through CodeStilt.

Your computer asks for work

The desktop app makes one kind of connection: outgoing HTTPS on port 443 to api.codestilt.com. It asks whether there is work for it and waits for an answer (this is called long polling). When you approve a plan, the answer arrives and the work starts.

Why this is safer

There is no listening service on your computer for anyone to find or attack. Company firewalls only need to allow one outgoing address. Proxies and company certificates work, because the app uses your system proxy settings and your computer's own certificate store.

The access key

When you link a computer, it receives its own access key. On Windows it is encrypted with the system's data protection for your user; on macOS and Linux it is stored in a file only your user can read. Remove the computer in the dashboard and the key stops working immediately.

The control panel you see in your browser runs on your own computer at a private local address and only accepts requests from that computer.