News for hackers. Stuff that matters.
Re:Ubiquiti Networks Breach by BrandoElFollito on Tuesday January 12, 2021 @11:15AM (#25748844)
You can reverse-proxy the traffic into the Ubiquity app, and have your RP terminating the TLS connection. This is what I do and I get a correct HTTPS connection to the web site.
Re:Ubiquiti Networks Breach by r9 on Saturday January 16, 2021 @04:25AM (#25801157)
And how is ubnt supposed to do that, on your own domain, as you've done? I suspect you don't really know how any of this works.
Re:Ubiquiti Networks Breach by BrandoElFollito on Saturday January 16, 2021 @09:56AM (#25802560)
Well, sorry for that. I will have to google "reverse proxy" a little bit more. And thank the god of your choice for having that setup miraculously working at home on my server.

What to say - maybe before assuming that someone "don't really know how any of this works" you may, just a second, think that the person your comment is directed to has written a security reverse proxy and presented on that on one of the largest security conferences.

Or not, maybe that I really do not know how terminating traffic on MY reverse proxy and sending it upstream to MY ubnt controller works. Who knows.

Re:Ubiquiti Networks Breach by r9 on Tuesday January 26, 2021 @06:11AM (#25914509)
In that case, you'd understand the difficulties of providing a product or piece of software out of the box with valid certificates without user setup, as you've done (without running all user data through offsite servers).

I too have a working reverse proxy setup or few. I certainly don't expect something using a "localhost site" to come with valid certificates. Unless they somehow get a valid cert for https://localhost

Edit: apologies for the assumption, I didn't realise that you weren't the guy I originally replied to. I'm new around here.