https for elk talking to changeip.com

m1u

New Member
I'm interested in setting up dynamic dns with an elk panel doing the work, using changeip.com.

I'd like to do this with my changeip user name and password encrypted, not in the clear... but it isn't clear to me that the Elk can do this. But before I give up on it, and put some other (not otherwise necessary) device on the network to take care of running a secure changeip update client. I'd rather not go that route, because that is another point of failure and that already bit me: I'm looking into this because in the past I had a webcam and relied on it, but then after an ISP IP change the camera died and I could not RP to my still-working alarm till I could physically visit it and figured out the new IP!

On the changeip FAQ at http://www.changeip.com/clients.asp they describe various URLS that will work, such as

https://nic.ChangeIP...e=my.domain.com

which would let changeip automatically detect your IP, and then they change the address DNS serves up for "my.domain.com". They highly recommend using "https" and not "http" so that your user name and password get encrypted (not just base64 scrambled, but really encrypted). But they are talking about doing this from a web browser, which always shows either http or https in the URL bar, and is clearly capable of doing the encryption.

Looking at the M1XEP doc, the example says it works with changeip. In the first box, I think it wants just an IP address, or a fully qualified name like "nic.ChangeIP.com". Then it wants user + password in the next two, and finally it just wants "my.domain.com" in the last box. So M1XEP doesn't want to use that specially constructed URL thing at all.

Am I correct that this means the M1XEP can't encrypt the user name/password, so if that bugs me, I have to put some other device on my LAN to run a more secure change IP client?

Thanks.
 
I have nothing specific to ChangeIP to offer, but are you sure you don't already have equipment that can handle the DDNS? For example, my little $50 linksys router is doing my DDNS (though No-Ip), and it works fine with the Elk. I don't have to tell the Elk anything. The Elk XEP is pretty limited and dated, frankly, most home routers may be more capable.

PS. I can't even connect to ChangeIP.Com, I tried both work internet and a separate personal connection, neither works. So I can't find anything about them specifically. And only you can judge the risk to you, but given how flakey home internet is in general, the risk of someone hijacking your password to intercept your DDNS and change it (to what real end?), seems pretty small likelihood of a failure resulting from it. Obviously you wouldn't use the same credentials for the DDNS update you use for anything else. Again, your call how much effort into security, but if I was really worried at that level, I think I would pay the $5/mo or so most providers charge for a static IP and never worry again.
 
I doubt the Elk supports HTTPS for this. It doesn't support SSL for anything else (i.e. email etc) save telnet access to the secure port.
 
Listen to Linwood and check your router for DDNS.
If you're that concerned about security you should be running DD-WRT/Tomato/etc. at the least or a small business router which could handle all of this easily.
 
Same here, Im using Tomato and it was a piece of cake to get it to run dyndns. I think it took longer for me to sign up for a domain than it did to setup the router to use it.
 
Thanks for the suggestions, I'll probably end up replacing my router at some point with one that can do secure dyndns right. For now, I added a new automation task + rule to help me if my webcam stops updating its IP before I get around to that. The task is basically: "send test email" . So if I can't connect and suspect that internet is working, but the IP has been renumbered and my dns server is stale, I can call the M1 on the phone and run that task, and then I receive an email which has the current IP embedded in the header somewhere.
 
Back
Top