The Impending Doom of Expiring Root CAs and Legacy Clients

Re:The Impending Doom of Expiring Root CAs and Legacy Clients by syshum on Monday June 08, 2020 @01:41PM (#23458749)

This is why you segment out your WiFi, I have 4 SSID's

1. Normal Traffic

2. Guest

3. Security Devices (Camera's, and other Home Automation)

4. Media Devices (Roku, FireTV, Smart TV's, etc)

media devices only have access to my home Plex server and the internet nothing else

[ Parent | on HN ]

Re:The Impending Doom of Expiring Root CAs and Legacy Clients by hanklazard on Monday June 08, 2020 @07:30PM (#23461948)

Yeah, VLANs work for a TV that is only trying to connect to your network, but doesn't deal with the case of a TV that will connect to any open SSID (a case that at least one other commenter in this thread claims is already occurring). It wouldn't be difficult to have the TV check different open networks if it's not able to reach a server due to a firewall config on the home network. For anyone living in a relatively dense city, this could be a problem.

[ Parent | on HN ]

Re:The Impending Doom of Expiring Root CAs and Legacy Clients by dsl on Monday June 08, 2020 @02:53PM (#23459553)

I just have a GLiNet travel router I picked up for $20 that is open and not connected to anything. Any "smart" devices get connected to that so they can talk to each other but not the internet.

[ Parent | on HN ]