Router requiring a security exception in the browser to proceed

Page 4 of 4 FirstFirst ... 234
  1.    #31

    As Ken has stated, you don't really connect to the Quantum router at your location directly. Instead, you connect to a web server via SSL/TLS, that will connect to your router and presents a GUI interface for configuration changes.

    The web server may, or may not have self-signed cert, but it does seem that it's the AVG that throws up the error message. Maybe the AVG wants to use its own SSL cert for intercepting/monitoring secured connections, hence the reason it does not match to the Quantum Server's DNS name. If there's an option in AVG for disabling SSL/TLS monitoring, try that first, you don't need to uninstall AVG.

    As a side note...

    The method how most AVs inspect secured connection used to be called man-in-the-middle attack. Hackers moved to the man-in-the-browser attack's that easier to pull off. The man-in-the-antivirus is really no different and I always disable it. There's nothing that would stop the AV to upload the content of the secured connection in plain text. It's a matter of trust I guess...

    Billy Joel - A Matter of Trust (Official Video) - YouTube
      My ComputerSystem Spec

  2. Callender's Avatar
    Posts : 1,181
    Windows 10 Home 1809 32-bit
       #32

    I don't trust it. I just use additional security measures.

    Google and Mozilla's message to AV and security firms: Stop trashing HTTPS | ZDNet
      My ComputerSystem Spec

  3.    #33

    Callender said: View Post
    Try FF Portable v38

    PortableApps.com - Browse /Mozilla Firefox, Portable Ed./Mozilla Firefox, Portable Edition 38.0 at SourceForge.net

    Don't run it at the same time as your installed Firefox. Launch the old portable version and see if you get the same problem connecting to your router login page. You can delete the portable version afterwards.
    I tried it, per your instructions. Portable Firefox 38 also detects it as an untrusted site.
      My ComputerSystem Spec

  4.    #34

    rivre said: View Post
    Well then wasn't it also self-signed last month, 6 months ago, last year, 2 years ago, etc.? What changed?
    My guess is that they do have a real certificate for released firmware, but that they use a self-signed one internally for development, and somebody dropped the ball and left the reference to that one in a firmware update. The self-signed cert was issued in 2015, so if it had been there all along we should have been getting security exceptions all along. There's no question that something changed about a month ago.
      My ComputerSystem Spec

  5.    #35

    Cr00zng said: View Post
    As Ken has stated, you don't really connect to the Quantum router at your location directly. Instead, you connect to a web server via SSL/TLS, that will connect to your router and presents a GUI interface for configuration changes.
    I'm not sure that's true. I get the same dialog, and the same exception, if I disconnect the WAN uplink and try connecting to the router. That means myfiosgateway.com is a hardcoded pointer to localhost in that server's hosts table, and the path into the router control doesn't leave my house. There is likely web server software built into the router's firmware, and the cert distributed with that software. Probably the fix is a new firmware update with a proper certificate built in.

    I may try to call Verizon support today and stay on till I get someone who knows something. Wish me luck.
      My ComputerSystem Spec

  6. Callender's Avatar
    Posts : 1,181
    Windows 10 Home 1809 32-bit
       #36

    Try resetting your router as suggested in Verizon forum.
      My ComputerSystem Spec


 
Page 4 of 4 FirstFirst ... 234

Related Threads
Browser security vs security package protection in AntiVirus, Firewalls and System Security
This has nothing directly to do with Win 10, but ... Some time ago I read an article about browsers using TLS to protect against man-in-the-middle attacks, and how some security packages disable this and become (in the eyes of the browser) a...
Read more: FTC files lawsuit against D-Link for router and camera security flaws | ZDNet
Hi there I couldn't believe this -- I'm switching my wireless connections completely from 2.4GZ to 5GHZ wireless (cable just upgraded to a nice optical fibre @ 200 Mb/s !! season 1 game of thrones approx 40 GB download at full 1080p with eng...
Read more: ASUS hit by FTC with 20-year audit for bungled router security | ZDNet
Try to use Spartan browser on Win10 build 10056 to access my home Router but unfortunately it canot pop up the login page.so I cannot do any configuration with my router when use Spartan browser. does anyone meet the same problem? thanks.
Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd
All times are GMT -5. The time now is 08:09.
Find Us