3 ms·
My point is precisely that current browsers and OSes make it impossible to ship a secure-by-default device running a local web server, NAS or otherwise. Requir
by lxgr 2y ago
My point is precisely that current browsers and OSes make it impossible to ship a secure-by-default device running a local web server, NAS or otherwise.
Requiring users to install a globally trusted CA is a disaster from a security point of view (now my NAS vendor or anyone that hacks them can pose as google.com!), and for this reason doesn’t even work with modern Android apps anymore, for example.
- Dylan16807 2y agoOffering a layperson NAS buyer a self-signed cert is not "secure by default" even if browsers did accept it.
- lxgr 2y agoWould it be less secure than unencrypted HTTP?
- Dylan16807 2y agoNo. But if you want "secure by default" then neither one is acceptable.