Skip to content

Security: defffis/WISP

Security

SECURITY.md

Security

Use the panel only on a trusted LAN. Every page and API request requires the router root password over HTTPS. Verify the local self-signed certificate through a trusted connection. Do not forward port 8443 to the internet.

Never attach router backups, TLS private keys, authentication files, passwords, session tokens or full network configuration to a public issue.

Report reproducible problems with the version, router model, firmware and a redacted description. A failed recovery retains private recovery data rather than declaring removal complete.

There aren't any published security advisories