[GH-ISSUE #785] Secure Server Implementation #657

New issue

Open

opened 2026-02-28 01:26:25 +03:00 by kerem · 0 comments

kerem commented

2026-02-28 01:26:25 +03:00

Owner

Originally created by @monkeytronics on GitHub (Dec 13, 2018).
Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/785

Basic Infos

Hardware

WiFimanager Branch/Release:

[x ] Master
Development

Esp8266/Esp32:

[x ] ESP8266
ESP32

Hardware: ESP-12e, esp01, esp25

ESP01
[x ] ESP12 E/F/S (nodemcu, wemos, feather)
Other

ESP Core Version: 2.4.0, staging

2.3.0
[x ] 2.4.0
staging (master/dev)

Description

Problem description

Settings in IDE

Module: NodeMcu

Additional libraries:
AWS IoT ESP8266 Arduino Websockets
ArduinoJson
WifiManager

I've hooked this code up to my ESP8266 and it works just fine. The only major change I made was create 2 new end points to allow me to set it up programmatically from my app, rather than use the web portal directly.What I wanted to ask was, is there any reason why this doesn't use a secure server or Diffie Helmann key exchange? Would that make it a secure mechanism rather than just flinging your wifi credentials out for anyone to hear? It feels like that would be a sensible evolution for this code. Anyone got any thoughts on that? Is it just too difficult, or is there some reason it's not needed that I've missed?

Originally created by @monkeytronics on GitHub (Dec 13, 2018). Original GitHub issue: https://github.com/tzapu/WiFiManager/issues/785 ### Basic Infos #### Hardware **WiFimanager Branch/Release:** - [x ] Master - [ ] Development **Esp8266/Esp32:** - [x ] ESP8266 - [ ] ESP32 **Hardware: ESP-12e, esp01, esp25** - [ ] ESP01 - [x ] ESP12 E/F/S (nodemcu, wemos, feather) - [ ] Other **ESP Core Version: 2.4.0, staging** - [ ] 2.3.0 - [x ] 2.4.0 - [ ] staging (master/dev) ### Description Problem description ### Settings in IDE Module: NodeMcu Additional libraries: AWS IoT ESP8266 Arduino Websockets ArduinoJson WifiManager I've hooked this code up to my ESP8266 and it works just fine. The only major change I made was create 2 new end points to allow me to set it up programmatically from my app, rather than use the web portal directly.What I wanted to ask was, is there any reason why this doesn't use a secure server or Diffie Helmann key exchange? Would that make it a secure mechanism rather than just flinging your wifi credentials out for anyone to hear? It feels like that would be a sensible evolution for this code. Anyone got any thoughts on that? Is it just too difficult, or is there some reason it's not needed that I've missed?