LANs should be included. It's just as bad as using most websites without TLS.
Maybe this helps forcing companies of IOT-like devices finally take security a bit more serious.
Maybe this helps forcing companies of IOT-like devices finally take security a bit more serious.
Browsers, rightfully so, don't accept self-signed certificates. Active Directory and Group Policies can push out a trusted self-signed root CA certificate and generate certs that endpoints can use, but that's a pain in the ass and usually requires central IT to manage.
Please someone come up with something I haven't thought of yet that doesn't break the internet but gets useful certs onto my LAN!
Why? What's the threat model, that your employer/colleagues can see your traffic?
We are rapidly moving away from perimeter solutions and toward zero trust networking models. Yes, you should encrypt and authenticate inside your LAN.