3 ms·
Sending the pihole admin password in a non-https url query string seems like a bad idea. You might argue that your network is 'trusted', but then I'd remind you
by craftyguy 8y ago
Sending the pihole admin password in a non-https url query string seems like a bad idea. You might argue that your network is 'trusted', but then I'd remind you that this pihole device is designed to intercept all dns on your network, and would be used quite maliciously if compromised.
- TremendousJudge 8y agoI don't think my neighbors are sniffing my wifi traffic, I wouldn't think the password to be at risk
- city41 8y agoYou can add a certificate and then access it over https: https://discourse.pi-hole.net/t/enabling-https-for-your-pi-hole-web-interface/5771 https://discourse.pi-hole.net/t/enabling-https-for-your-pi-h...