Re:Chrome 68 Released: HTTP Sites Marked as “Not Secure”
by xg15 on Wednesday July 25, 2018 @05:58PM
(#17613280)
Yes if you trust your device users to have advanced technical skills or if you control both the device and the machines that show the web interface, you can do a lot - in that case, the easiest solution would be to install a custom CA cert - or use your own client and ditch browsers completely.
However, my scenario was for situations where you don't want to modify the viewing device.
The advantages of web interfaces is that you get a complex GUI for your device without significant overhead on the device and without any requirements on the viewing machine. You can use an arbitrary PC or phone to access it.
If HTTP were to go, that would change: Either you restrict which machine can view the GUI (by requiring a specific resolver and/or CA) or you add the overhead of maintaining and updating the certificates and domains.
An example would be a (non-cloud) security camera or network printer. Those devices typically have a complex web interface for administration and data access - however, they are typically used within a LAN and there is no technical need why they need to access the internet. Indeed, when misconfigured, they can even be vulnerabilities.
However, my scenario was for situations where you don't want to modify the viewing device.
The advantages of web interfaces is that you get a complex GUI for your device without significant overhead on the device and without any requirements on the viewing machine. You can use an arbitrary PC or phone to access it.
If HTTP were to go, that would change: Either you restrict which machine can view the GUI (by requiring a specific resolver and/or CA) or you add the overhead of maintaining and updating the certificates and domains.
An example would be a (non-cloud) security camera or network printer. Those devices typically have a complex web interface for administration and data access - however, they are typically used within a LAN and there is no technical need why they need to access the internet. Indeed, when misconfigured, they can even be vulnerabilities.