{
  "port": 3689,
  "protocol": "tcp",
  "service": "DAAP",
  "oneLiner": "Digital Audio Access Protocol — an iTunes-style shared music library, advertised over Bonjour.",
  "whatItIs": "DAAP is HTTP with a binary content-code payload: a client GETs /server-info, /login, /databases and streams tracks over the same connection. Apple built it for iTunes music sharing, and the port is still used by AirPlay-adjacent software and by open-source servers — OwnTone (formerly forked-daapd) is the common one on Linux and NAS boxes. Instances announce themselves on the LAN over mDNS as _daap._tcp, which is why you find the port on Macs, Synology units, and Raspberry Pis without anyone configuring it. A library can be password-protected, but many are not.",
  "exposure": {
    "verdict": "careful",
    "note": "It is designed for a trusted LAN and discovered automatically there; publishing it exposes your whole media library, and often unauthenticated, so keep it inside the network."
  },
  "checkCommand": "curl -sS -D - -o /dev/null http://TARGET:3689/server-info",
  "links": [
    {
      "title": "Apple Support — TCP and UDP ports used by Apple software products",
      "url": "https://support.apple.com/en-us/103229",
      "kind": "official-docs"
    },
    {
      "title": "owntone/owntone-server",
      "url": "https://github.com/owntone/owntone-server",
      "kind": "github"
    },
    {
      "title": "IANA port registry — 3689 (daap)",
      "url": "https://www.iana.org/assignments/service-names-port-numbers/service-names-port-numbers.xhtml?search=3689",
      "kind": "iana"
    }
  ]
}