[Commotion-admin] [commotion-docs] https requests cannot be used to request internet access (#1)

[areynold]

The commotion splash screen only captures traffic on port 80 (http), since any attempt to redirect https traffic would throw an SSL certificate error warning (correctly) of a man in the middle attack.

Since the splash screen is used to grant internet access to AP clients, a user requesting a secure webpage (e.g., https://google.com) will not be able to connect to the internet and may not receive any indication that they need to visit a non-SSL webpage first.

Some OS level tools attempt to work around this problem, which is common to all captive portals, but there is no real technical fix. This should be documented in the startup materials.



---
Reply to this email directly or view it on GitHub:
https://github.com/opentechinstitute/commotion-docs/issues/1
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.chambana.net/pipermail/commotion-admin/attachments/20130918/4a767fb2/attachment.html>