readycloud.netgear.com using INSECURE non-https!

[dan_m1]

readycloud.netgear.com redirects to a non-https address after login, giving authentication cookies and router access to anyone on a shared network (such as public wifi)! Https is used for login (if a weak version), but redirecting to completely insecure for router access is unacceptable.

[Nhellie]

related to this: viewtopic.php?f=23&t=79106

[itsjasper]

Are you testing this with a shared network, or running it from your home network?

[dan_m1]

Tested from home network. If it's just redirecting there, I suppose it's theory okay in theory, but it does leave me a bit uncomfortable.

[itsjasper]

Test it on a public network and report back. 😉