NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
Forum Discussion
Solved
EX8000, RS8000P, &RS700 HTTP To HTTPS switch.
I thought I would change my extender and router from HTTP to HTTPS. However, once I did this, I got SSL certificate errors and could no longer login or connect to the devices. I was using Google Ch...
p.s. Probably should make clear that noticing web browser WARNING messages is a very good practice. The point is to use common sense If the device being used to open MY router web interface is on MY local private network and the web server is also on MY local private network (especially if opening it using the IP address rather than URL), that is a very different thing than opening <name of my bank>.com) and getting a warning.
michaelkenward is correct. Netgear customers are caught in a "Catch 22" caused by modern web browsers:
- If the web interface is kept at the default (http), web browsers scream, "UNSAFE. NOT SECURE. GO BACK!" because by definition in today's world, an http web connection is plain text which can be intercepted between the web browser and the web site. Never mind the fact that both the web site (router) and web browser are on the same private network.
- If the web interface is changed to https, web browsers scream "UNSAFE. NOT SECURE. GO BACK!" because Netgear routers use a self-signed SSL certificate that is not registered with one of the SSL authorities recognized by the web browser. Thus, even though (a) the connection is still on a local private network, and (b) the connection is encrypted using SSL, a self-signed certificate cannot be trusted! Years ago, Netgear registered several URLs with SSL certificate authorities, including orbilogin.com, orbilogin.net, routerlogin.com, routerlogin.net. Obviously, these URLs do not lead to web sites run by Netgear. They are intercepted by the Netgear router and redirected to the local router IP address.
It is a royal pain in the *****. Many browsers will allow an option to "ignore this warning and go there anyway." Once done, the browser will remember the choice and quit complaining. I leave my Orbi web interface on the default http and just get on with life.