Buffalo Forums

Products => Storage => Topic started by: fgn on January 16, 2009, 12:28:02 PM

Title: website is authenticating in clear text??
Post by: fgn on January 16, 2009, 12:28:02 PM
   

We are evaluating linkstation 2T for use at work. IT performed a security test and reported:

The most concerning part was that the website is authenticating in clear text. 

 

Is there a way to make it more secure? is SSL an option? It seems someone may be able to eavesdrop the communication while someone is configuring the device and have full control over it. 

 

Waiting anxiously for any help....

 

Thanks!!

 

 

Title: Re: website is authenticating in clear text??
Post by: Colin137 on January 17, 2009, 03:34:31 PM
The next series of products are planned to have SSL support for the web interface.
Title: Re: website is authenticating in clear text??
Post by: TroyWolf on January 18, 2009, 12:24:43 PM
   

Colin137 wrote:
The next series of products are planned to have SSL support for the web interface.
Hopefully it would also be available as firmware update to the current models. Very dissappointing if not made available to existing customers. Since the encryption can be done in software, seems there is no technical reason not to make this feature available in a firmware update. 

 

Title: Re: website is authenticating in clear text??
Post by: Colin137 on January 20, 2009, 10:16:31 AM
I will pass that request to my corporate office. Thank you for your suggestion.
Message Edited by Colin137 on 01-20-2009 10:16 AM
Browser ID: smf (is_webkit)
Templates: 1: Printpage (default).
Sub templates: 4: init, print_above, main, print_below.
Language files: 1: index+Modifications.english (default).
Style sheets: 0: .
Hooks called: 60 (show)
Files included: 27 - 1055KB. (show)
Memory used: 734KB.
Tokens: post-login.
Queries used: 10.

[Show Queries]