3 ms·
My Motorola cable modem (MB8600) has this same issue with its status page, and Motorola's "solution" is strictly worse than just being unsecured. It used a sel
by wffurr 6y ago
My Motorola cable modem (MB8600) has this same issue with its status page, and Motorola's "solution" is strictly worse than just being unsecured. It used a self-signed certificate which requires clicking through security warnings in every browser.
As a bonus, it seems to generate the certificate based on a random seed at boot time. So if you power it off for long enough, it generates a new different self-signed certificate that causes un-click-through-able security warnings in all browsers other than IE11.
For Safari, I can at least delete the saved certificate from the keychain and get the usual "untrusted certificate" warning which I can click through instead of the hard stop "impersonation" warning.
The kicker is that you can't even do anything other than reboot from the modem status page. It doesn't even expose a firmware upgrade; that's controlled by the ISP.