Does remote access have to be over https?

Configuration
1

Hi,

i opened up the port and used a dynamic dns service on the router

all works well remotely

does that mean login details are sent in plain text over the connection to my phone or does ha do it own “secure layer”

just wondering weather its essential or just preferable or when using a remote web browser?

thanks

2

Yes without HTTP(S) all your details are sent over plain text. That’s what HTTP is. Securing this connection with a certificate is the preferred method. The choice is yours though.

3

oh ok thanks,

i’m trying for the simpleast setup (KISS method)

… just found the zerotier addon in HA :slight_smile:

i think i’m going to go down this route as i’ve used zerotier before and will just specify the zerotier ha address in the phone app, after installing the addon on ha and the zerotier app on the phones (zt on phones always connected with automatic restart)

ps should survice a router/isp change too!