5 ms·
Plain HTTP is fine because the IP is a site-local.
by wbl 7y ago
Plain HTTP is fine because the IP is a site-local.
- creeble 7y agoExcept for the browser complaint when filling out the form. I have to agree with the calls for allowing warning-less HTTP for LAN connections. Edit: Add last sentence.
- gsich 7y agoThis is not a hard-stop like the TLS warning pages. So not a "big" issue.
- willhschmid 7y ago>I have to agree with the calls for allowing warning-less HTTP Completely flawed assumption, see the following for details: https://realtimelogic.com/articles/How-Anyone-Can-Hack-Your-Embedded-Web-Server https://realtimelogic.com/articles/How-Anyone-Can-Hack-Your-...
- nybble41 7y agoSo you trust every cheap IoT device connected to your local network? The LAN may be a slightly less chaotic environment than the open Internet, but that doesn't make it "safe". With a bit of ARP trickery any device on the LAN can intercept traffic intended for any other local device and carry out an active MitM attack—and with HTTP you don't even get the benefit of "trust on first use" that you'd get with a persistent self-signed certificate.