NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
orbilogin.net without https???
I can't believe that the website that is being used for managing my Orbi system is only http.
Passwords to enter your settings are sent without encryption.
Really?
And this is from a company dealing wit networking products?
Am i missing something or is this blatantly stupid?
4 Replies
HTTPS isnt really needed on the LAN side for the management page. WIll be needed for remote access on the WAN side though.
key word is remote as in coming in from outside
Isn't that because it's you talking to your router on the inside?
Been using it for years with no problems
srammai wrote:I can't believe that the website that is being used for managing my Orbi system is only http.
Passwords to enter your settings are sent without encryption.
Try connecting to https://orbilogin.net
The connection will be encrypted as you want. Please be aware, however, that the browser will complain about the SSL certificate being "self signed" and will require you to say, "go ahead anyway" (the first time). Totally encrypted. Nothing "in the clear".
I agree with earlier comments that on the "LAN side" lack of encryption is more of an intellectual exercise than a real issue:
- When a computer is connected to the Orbi router over ethernet, there is no way anyone can intercept data packets.
- When a computer is connected to the Orbi router over WiFi, the transmission is encrypted. There are hacks to break WiFi encryption which require collecting hours of data, so a determined, sophisticated hacker can probably hack the WiFi system and collect anything that goes over the net. So, if a person is potentially a target of law enforcement or industrial spying, using WiFi is probablly not a good idea.
