NETGEAR is aware of a growing number of phone and online scams. To learn how to stay safe click here.
AlphaBravo88
Mar 14, 2016Initiate
Status:
Engineering Investigation
Modems/Routers : Add HTTPS when connecting to the NETGEAR Genie page
Hi NETGEAR, I have recently configured a few different NETGEAR ADSL Modems/Routers, to be specific the D6400 and DGND3700v2, but both of these don't appear to support a HTTPS connection to the NE...
tribblon
Mar 20, 2018Fledgling
Kind of responding to this and several other very similar threads on this forum I came across covering many netgear routers.
No router software newer than lets say... 2010?.. just to pick a number, should even have plaintext anything as an option for communicating with a router's admin interface / OS, period. This is _basic_ security. Anything made within the last several years should support HTTPS using TLS 1.1-1.3 (no SSL) for admin interfaces.
Saying the local network is secure by calling it "internal" or "inside" or whatever word you want to use as if it is some magic wand that solves all security problems, is simply ignorant and in the case of a developer working on router firmware saying it, irresonsible, even negligent. WPA2 is quite crackable these days, and it has never been sure-fire. Wireless networks are fundamentally insecure by their very nature. There is _no_ excuse whatsoever for current router firmwares not having at least the _option_ of turning on https (and optionally ssh) for management and disabling http/telnet/plaintextwhatever.
And given that it is trivial to implement given the toolsets/packages/etc. available today, I'm really not sure what is preventing Netgear from keeping up with basically every one of their competetors on this point? Its very perplexing as a consumer to spend a few hundred dollars on a crazy gaming router (R9000 in my case) only to find that it doesn't even have industry standard basic minimum security features... in 2018.
Seriously, what is the actual deal?