@JBuddenbrooks wrote:
Once a month I log in to orbilogin.,com to see if there are any Firmware updates. I've observed that the login URL does not use "https://" meaning that my login is not secure. Is there any reason that Netgear does not use a secure login?
My experience matches that of FURRYe38. Most of the consumer routers I have owned over the past 10 years used HTTP (and Telnet) which has no encryption. There was a time when OpenWRT that Orbi is based on was aimed at hardware with much smaller memory and implementing SSH caused problems. This is obviously no longer the case. Netgear's Nighthawk line of routers also uses HTTP for the web interface. My guess is that Netgear does not see a large enough return on the investment it would take to implement encryption. Now that so many customers are using Wi-Fi devices to manage their routers, that calculation may change. (Computers wired to the router do not expose traffic to snoops.)
