NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
JBuddenbrooks
Apr 01, 2019Guide
Orbilogin does not use secure (https) login - why? (RBK50)
Once a month I log in to orbilogin.,com to see if there are any Firmware updates. I've observed that the login URL does not use "https://" meaning that my login is not secure. Is there any reason tha...
CrimpOn
Apr 01, 2019Guru - Experienced User
JBuddenbrooks wrote:
Once a month I log in to orbilogin.,com to see if there are any Firmware updates. I've observed that the login URL does not use "https://" meaning that my login is not secure. Is there any reason that Netgear does not use a secure login?
My experience matches that of FURRYe38. Most of the consumer routers I have owned over the past 10 years used HTTP (and Telnet) which has no encryption. There was a time when OpenWRT that Orbi is based on was aimed at hardware with much smaller memory and implementing SSH caused problems. This is obviously no longer the case. Netgear's Nighthawk line of routers also uses HTTP for the web interface. My guess is that Netgear does not see a large enough return on the investment it would take to implement encryption. Now that so many customers are using Wi-Fi devices to manage their routers, that calculation may change. (Computers wired to the router do not expose traffic to snoops.)