Antivirus? Web Certificates?

Configuration
1

Sorry but I have searched high and low and have not found this and I will be the first to admit my HA system has been online precisely 3 days so I am as green as green can be and currently a SmartThings user looking to migrate here.

I work a lot in security and I have not seen this on this platform nor has Google and searches in here resulted in anything.

  1. Is there AntiVirus? I could probably install ClamAV but I wanted to make sure it would not break anything.

  2. Out of the box, I see you web into it on port tcp/8123. I do not see a certificate to encrypt the data back and forth, even if it is just a self-signed certificate. Is there anything for this?

Thank you in advance.

2

  1. AntiVirus would probably not make much sense to a codebase that is changed as often as HA and its integrations. Heuristic analysis would not make much sense either due to the nature of a home automation system.

  2. There are lots of solutions but using a certificate internally means you need to use domain names internally too.
    Using a certificate externally on HA makes no sense if you are into security, because the safe way would be to use a VPN in front of HA, either the NabuCasa hosted service or a self-hosted service.

3

  1. No, and you can’t install it with HAOS. Then again, your SmartThings hub doesn’t have AV either :stuck_out_tongue:

    a. That said, if you use the Container install method you can do whatever you want on the host so you can run ClamAV, or any other AV, there. Coverage of Linux malware in any AV is limited though, so I’d be wary of assuming it provided much/any actual security.

  2. You can certainly add SSL, but there’s no value in providing a default, untrusted, certificate. Most people will use LetsEncrypt (because it’s provided as both part of the DuckDNS add-on, and also as a separate add-on), but I know people using paid for certificates too - and other solutions.