No Security at all? Really?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

No Security at all? Really?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
No Security at all? Really?
No Security at all? Really?
2017-12-08 03:38:09
Model :

Hardware Version :

Firmware Version :

ISP :

I've been banging my head against the wall for a few hours now, and can find no way to enable HTTPS (secure http) to my TL-SG108E, which has access to ALL of my LAN traffic. It seems like a *really bad* idea to connect to a device in such a high position without enabling secure connections. I hope that I've just overlooked a switch to change the access method to HTTPS from HTTP. Please point me to it if that's the case.

On a related note, connecting to THIS SITE exhibits the same lack of consideration for security. In this case, I'm pretty sure that I cannot enable HTTPS. I've tried changing my URLs by adding the S, but in every case I receive an error. When connecting with the basic HTTP all of my connections are, of course, unencrypted, and my user credentials, including passwords, are sent over the public Internet in plain-text!! :-/

Does tp-link just not care at all about network security?
  0      
  0      
#1
Options
1 Reply
Re:No Security at all? Really?
2017-12-08 22:40:35

captain! wrote

I've been banging my head against the wall for a few hours now, and can find no way to enable HTTPS (secure http) to my TL-SG108E, which has access to ALL of my LAN traffic.


The TL-SG108E does not support HTTPS access to its web UI. If you need this, use a Smart Switch (e.g. TL-SG2008). But if some intruder can break into your LAN and place a MIT attack between your PC and the TL-SG108E (i.e. capturing your traffic on the Ethernet cable connecting both devices) you have a big problem anyway. Nobody can capture the traffic between your PC and the switch in an isolated LAN, even not if connected to the switch physically, except he has direct physical access to your single Ethernet cable connecting your device with the switch. Im sure you would notice it, if some guy sits beside you.

It's not a hub, it's a switch, meaning no other device can see the unencrypted traffic between another device and the switch. What an intruder in your LAN could do is a brute-force attack to the switch's web UI, but he could do this also if the web UI would use HTTPS.
༺ 0100 1101 0010 10ཏ1 0010 0110 1010 1110 ༻
  1  
  1  
#2
Options