NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Lashn
Sep 23, 2018Aspirant
The connection to this site is not private
Me and my brother recently got an XR500 gaming router and when i go to log into the DumaOS site it says the following on the log in screen (your connection to this site is not private) instantly my h...
Netduma-Fraser
Sep 24, 2018NetDuma Partner
You can access the interface via https://routerlogin.net from the LAN side schumaku. Though I wouldn't recommend it.
schumaku
Sep 24, 2018Guru - Experienced User
Netduma-Fraser wrote:
You can access the interface via https://routerlogin.net from the LAN side schumaku. Though I wouldn't recommend it.
Can you please elaborate a little bit more? Is this some hit-and-miss on DumaOS like on the "other" router platform? In fact it's brilliant and it would not cause people complaining about the "Not secure" or "The connection to this site is not private" warnings from the browsers.
Needless to say, form the security audit prospective an almost public shared private key - as it's in place on all Netgear routers, or at least on these of a similar firmware release generation - does not add much privacy. But it would make the browsers and most customers happy.
- Netduma-FraserSep 24, 2018NetDuma PartnerI believe Netgear are looking at a security certificate to ensure accessing via HTTPS is secure, I don't have a date or any more information on this but I know it's something they want to do. I imagine more for when the interface is accessed remotely rather than locally but would apply for both.
- schumakuSep 24, 2018Guru - Experienced User
Netduma-Fraser wrote:
I believe Netgear are looking at a security certificate to ensure accessing via HTTPS is secure, I don't have a date or any more information on this but I know it's something they want to do. I imagine more for when the interface is accessed remotely rather than locally but would apply for both.For remote by https _and_ a green "good enough" indication in the browser would require an unique URL by router/device _and_ a dedicated certificate signed for each device.