security risks http about wetty HOT 3 CLOSED

I suspect there's also security risks on HTTPS, which hackers can exploit the web interface to brute-force attack on user's password.

from wetty.

NEVER use http for anything other than a totally open, public information server. Yes, something (rather than someone) will start sniffing.

HTTPS risks are main about having poor certificate chain checking. Harder to achieve but possible, especially in unreliable wi-fi environments such as coffee shops.

from wetty.

using http on the open web should always be considered unsecured. and leaking access and passwords a possibility

from wetty.