3 ms·
> What's the point of using HTTPS on a local network? The same reason you use HTTPS for anything else. If I can get on your WiFi network and you're using HTTP
by DKnoll 9y ago
> What's the point of using HTTPS on a local network?
The same reason you use HTTPS for anything else. If I can get on your WiFi network and you're using HTTP to access local servers (say your NAS) I can inject resources or capture your traffic.
> If you want to expose an IoT device to the internet (assuming you can deal with the NAT barrier), why not use a domain name like for any other server?
Many people do this, but it requires that your router supports hairpinning/NAT loopback and also that you know the option is there... many consumers and their routers do not.
- rkeene2 9y agoBut since anyone can act the same as the IoT device, there's no way to prove that the IP you're connecting to is the same device and not a MITM, other than if you've been to that host and accepted it's key and the system warms you in key changes. Since it is decidedly not TLS, we should call that protocol something else. HTTPC perhaps then use SSH protocol on the outside with HTTP on the inside. Port 223/TCP.