Your session. Your access rules.
- System credentials, verified over SSH.Waylo checks login against sshd on localhost. Only the running session’s owner can connect; sudo access is required.
- Encrypted transport out of the box.HTTPS and WSS use a self-signed certificate by default. The optional desktop client can pin the certificate.
- A private route to your desktop.Use an SSH tunnel or VPN. Keep port 8080 off the public internet.