Why does the Duplicacy executable maintain a secure TCP connection to duplicacy.com in the USA?

I’m using PortMaster to monitor my outgoing connections. The duplicacy executable has connections open to api.onedrive.com in Canada as expected, but also a secure port 443 connection to duplicacy.com in the USA. What is the USA duplicacy.com connection for?

The executable in question is: duplicacy_win_x64_3.2.5.exe

Kind regards,
nichm (UK-based)

The connection to duplicacy.com is used to refresh an access token issued by OneDrive. This token needs to be renewed periodically, and refreshing it requires a client secret that OneDrive gave to the Duplicacy app for it to access your OneDrive storage. Because this client secret must remain on the Duplicacy server, the duplicacy executable needs to make this connection to duplicacy.com which then talks to OneDrive to refresh the access token for you.

2 Likes

Thank you, GChen, for the thorough explanation.:pray: