I'd like to use Chromecast on our office network. Doing so requires enabling UPnP (Universal Plug and Play).
A quick search turns up statements like this:
The US Department of Homeland Security is urging everyone to disable the common networking Universal Plug and Play (UPnP) protocol...UPnP has been, is now, and will always be a security nightmare of a protocol.
I know very little about network protocols beneath the application layer, so much of this goes over my head.
Is it true that UPnP is fundamentally and irreversably flawed?
Are there any mitigating circumstances in which it isn't "a security nightmare"? Is there any way to use Chromecast without compromising security?