Feature

A certificate that does not rot

The board serves its login page over HTTPS, and on stock firmware that certificate is unusable by any browser made since 2017, expires in thirty days, and is never replaced. This fork fixes all three.

The argument, and the measurements behind it →

825 daysvalidity, renewed 30 days before it ends

5key types served, each proved by a real handshake

0certificates this firmware will overwrite that it did not issue

See the interface it protects →The login page, and everything behind it. One page over every board →What the client certificate on that connection buys. Every metric the board exposes →Including the expiry above. What is still not fixed →The honest list, with tickets.

The login page the certificate protects. On stock firmware no browser would accept the certificate in front of it.