Newbie question: Is remote access secure?

[Robert]

Instructions suggest setting up port forwarding for remote access, but no further security details are listed.

If I use port forwarding and login from the a web browser or the iOS app, is the login password encrypted?

Is https used for security or is port forwarding just exposing the regular http/webui to the internet?

My initial impression is that I should not use port forwarding and just use a secure VPN to connect to the local lan remotely instead.

I have also found instructions on reverse proxy ( http://rayshobby.net/mediawiki/index.php?title=Secure_Remote_Access ) but this seems to only support the PI or Beagle versions of Open Sprinkler, not the commercial version.

[Axel]

It is not secure. You need to use a TLS proxy like haproxy or nginx.

[Robert]

Thanks!

I’ve decided to keep it to the local LAN only and use the OpenSprinkler plug-in for Indigo as the primary control point. Since Indigo has secure remote access, that does everything I need in one place.

[Author]

Posts