SSL Pinning function

[ammnt]

Prerequisites

• [X] I have checked the Wiki and Discussions and found no answer

• [X] I have searched other issues and found no duplicates

• [X] I want to request a feature or enhancement and not ask a question

Description

Hello,

please add SSL pinning. Now I use NGINX as reverse proxy to solve this problem🙏🏼

Thank you. Best regards😙

[centralhardware]

IMHO nginx is best place for ssl pining.

[SSJPKXL]

I agree. I think that there should either be 2 SSL certificates - one for GUI and one for domain resolution via DoH/DoT or an option to disable domain resolution via DoH/DoT, but preserve SSL encryption exclusively for GUI login. Routers use separate certificates for separate functions (server, bridge, guest captive portal, etc). It is actually less confusing and more secure that way.

I also think that for GUI login AGH team should create a key store that generates random self-signed SSL certificates during AGH setup.