Namecheap DDNS updates insecurely over http

[kayson]

I'm on 384.3 on an RT-AC68U. I just set up ddns with my namecheap domain, but according to the logs, it appears to send the request over http, not https.

May 23 11:48:10 start_ddns: update WWW.NAMECHEAP.COM namecheap, wan_unit 0
May 23 11:48:10 ddns_update: ez-ipupdate: starting...
May 23 11:48:10 ddns_update: connected to dynamicdns.park-your-domain.com (104.219.249.157) on port 80.
May 23 11:48:11 ddns_update: request successful
May 23 11:48:11 ddns_update: asusddns_update: 0
May 23 11:48:11 ddns: ddns update ok

It appears that the server does in fact support ssl: https://dynamicdns.park-your-domain.com/getip
I'd rather not send my api key insecurely, since it would allow anyone to point my domain to their own server. I guess I can either do a custom ddns script, or use a software client. Or maybe it's fixed in the latest release? (A project for later today, I suppose).

Can this be fixed?

 

[Zirescu]

https://github.com/RMerl/asuswrt-merlin/wiki/DDNS-Sample-Scripts#namecheap

 

[kayson]

https://github.com/RMerl/asuswrt-merlin/wiki/DDNS-Sample-Scripts#namecheap

Thanks. I figured that was the case. Do you know if there's a way to modify the built-in?

 

[Zirescu]

Would likely need to modify and recompile from the source - https://asuswrt.lostrealm.ca/source

 

[RMerlin]

Thanks. I figured that was the case. Do you know if there's a way to modify the built-in?

No, because ez-ipupdate does not support SSL.