Using https: for router log in page

[Miguel Santa]

I came across this page while searching the ASUS website for information about how to make my RT AC5300 more secure and I wanted your expert opinion about making the router's log in page https instead of http using "Let's Encrypt" free certificate. Do you think is a good idea? Any benefits from doing this?

 

[Internet Man]

If you will only ever access the router's web interface from within your local network then there's probably not a huge reason to use https. Without https, your login password is sent to the router in plaintext but someone would have to already have access to your network to intercept it.

If you were going to be accessing your router's web gui remotely over the internet then it would be much more important to use https. It's probably best to not enable remote administration and to set a secure password to the router's interface.

How to enable HTTPS and create a certification by using ASUS Let’s Encrypt?

 

[Miguel Santa]

Thank you very much for replying to my posting. Besides making your password strong, resetting your router and having the latest firmware, is there anything else I should consider to keep my router secured from this russian malware going on?

 

[sol1109]

I setup the "Let's Encrypt" free certificate and the router page says it's active but when I bring up the router web interface Chrome says its insecure. Does this only work when using the DDNS address and not a local address?

 

[RMerlin]

I setup the "Let's Encrypt" free certificate and the router page says it's active but when I bring up the router web interface Chrome says its insecure. Does this only work when using the DDNS address and not a local address?

Correct, since the certificate is tied to a public hostname.

Sent from my P027 using Tapatalk

 

[sol1109]

Correct, since the certificate is tied to a public hostname.

Sent from my P027 using Tapatalk

Whats the recommendation when accessing from the local LAN over https then?

 

[RMerlin]

Whats the recommendation when accessing from the local LAN over https then?

Either setup your own certificate authority and use it to sign your own certificates throughout your LAN, or just live with the browser warning and ignore it.