20.xx: postponse LuCI HTTPS per default

Karl Palsson karlp at tweak.net.au
Fri Nov 20 04:44:13 EST 2020


"Paul Spooren" <mail at aparcar.org> wrote:
> Hi,
> 
> The current list of release goals for 20.xx states[0] that LuCI
> should use HTTPS per default. This works by creating on-device
> a self-signed certificate. Self-signed certificates result in
> warnings and may cause more harm than good, multiple discussion
> are found in the mail archive.
> 
> As no clean solution seems in reach while 20.xx seems close,
> I'd like to suggest to postponse HTTPS LuCI (`luci-ssl` vs
> `luci`) per default.
> 
> This isn't a vote but a request for developer/user opinions.

Very much in favour of leaving this off, self-signed isn't viable
by default

Sincerely,
Karl Palsson
-------------- next part --------------
A non-text attachment was scrubbed...
Name: OpenPGP-digital-signature.html
Type: application/pgp-signature
Size: 1175 bytes
Desc: OpenPGP Digital Signature
URL: <http://lists.openwrt.org/pipermail/openwrt-devel/attachments/20201120/29d1c014/attachment.sig>


More information about the openwrt-devel mailing list