Secure HTTP web interface
Because the web interface runs as a web server CGI script, it is possible to run it inside a Secure HTTP server. This technique can be used if you are concerned about a technique
called "packet sniffing" whereby someone in your network can use an Ethernet watching program to read your password as you type on the network.
This is a more sophisticated type of attack, and its actual abuse is rare, but is a known security risk.
If you use a Secure HTTP server, the URL to your web interface will begin with http: and the entire web interface session will be encrypted. That will make it very difficult to practically
impossible to crack the password (depending on the encryption used by the browser).
|