Security enhancement - Local Hubitat interface

[okellyro]

Hi there

Currently all Local interactions with the Hubitat device operate over HTTP.

Is it possible to secure all interactions to only allow

• HTTPs / TLS 1.3 and 1.2 ( HTTP over TLS )
• the TLS protocol to be selectable ( allowing the disablement of either 1.2 or 1.3 )
• HTTP interactions to be disabled or enabled

[Eric.C.Miller]

@bravenel for the enhancement list.

[ben12]

++ I would hope this becomes a high priority.

It may be fairly simple to add a "Force HTTPS" settings checkbox that when enabled, would force redirect from http to https.

[Hasty1]

Use my own SSL cert on Hubitat?

Is there a way to replace the certificate on my Hubitat C-7 with my own? I have a certificated I generate and use on all my network devices (routers, NASes, Unifi Controller, etc.) to avoid the browser nags and would love to use it on my Hubitat to do the same.

@ben12 There is an option to allow only Https which will redirect.