cloudy cloudy

Author Topic: Weather Underground PWS protocol  (Read 528 times)

0 Members and 1 Guest are viewing this topic.

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Weather Underground PWS protocol
« on: September 29, 2017, 09:39:57 PM »
Browsing http://help.wunderground.com/knowledgebase/articles/865575-pws-upload-protocol I noticed that the examples use  secure HTTP (https) to upload data.

However, the Weather Underground control panel  in WD 10.37S54 shows the last data sent as using http.  Is there an option to get WD to use https instead as sending unencrypted passwords isn't very secure.

Online Weather Display

  • Posts: 81,909
  • Davis VP2
  • New Zealand
  • OS/Browser:
  • Win NT 10.0
  • Chrome 60.0.3112.113
    • Weather Display
Re: Weather Underground PWS protocol
« Reply #1 on: September 30, 2017, 12:18:27 AM »
its no problem to change to using https (only problem is, it will be slower)
but in 17 years I am yet to see a reported problem caused by the password

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #2 on: October 01, 2017, 10:05:54 AM »
Yes, there is an overhead of using https instead of http - security is rarely without cost.  Whether the use of https has a significant impact on system performance will depend on the upload rate.  At every 5 mins I doubt I would even notice.

Perhaps the use of http/https could be selectable, leaving the user to make the call between performance & security?

Offline niko

  • syzygy
  • Global Moderator
  • Posts: 26,737
  • Crystal Ball broken! Please post the URL.
  • Northern California, U.S.A.
  • OS/Browser:
  • Win 7/Srvr 2008R2
  • Chrome 61.0.3163.100
Re: Weather Underground PWS protocol
« Reply #3 on: October 01, 2017, 01:40:20 PM »
Maybe I'm missing something but I really don't see the value of a wunderground password to anyone  :?

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #4 on: October 01, 2017, 04:52:18 PM »
OK, care to post your's here?

Offline niko

  • syzygy
  • Global Moderator
  • Posts: 26,737
  • Crystal Ball broken! Please post the URL.
  • Northern California, U.S.A.
  • OS/Browser:
  • Win 7/Srvr 2008R2
  • Chrome 61.0.3163.100
Re: Weather Underground PWS protocol
« Reply #5 on: October 01, 2017, 05:03:44 PM »
OK, care to post your's here?

That's a whole different thing from worrying about the small chance of some man in the middle attack intercepting it because it's an http connection.


Online Weather Display

  • Posts: 81,909
  • Davis VP2
  • New Zealand
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Weather Display
Re: Weather Underground PWS protocol
« Reply #6 on: October 01, 2017, 05:44:50 PM »
yes I can make it selectable (I had already put the code in place)
I agree with Niko about this though

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #7 on: October 01, 2017, 10:08:22 PM »
Given that Brian's already done the work, why not give people the choice?

Offline niko

  • syzygy
  • Global Moderator
  • Posts: 26,737
  • Crystal Ball broken! Please post the URL.
  • Northern California, U.S.A.
  • OS/Browser:
  • Win 7/Srvr 2008R2
  • Chrome 61.0.3163.100
Re: Weather Underground PWS protocol
« Reply #8 on: October 01, 2017, 10:12:50 PM »
I don't have a problem with that. Just expressing my opinion that there isn't much justification for it.

Online Weather Display

  • Posts: 81,909
  • Davis VP2
  • New Zealand
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Weather Display
Re: Weather Underground PWS protocol
« Reply #9 on: October 02, 2017, 07:02:26 PM »
I actually forgot that this option is already available (make sure you have a recent version of WD)
i.e tick use https

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #10 on: October 03, 2017, 07:27:40 AM »
Brian

I'm using WD 10.37S54.  I can see a HTPS checkbox - is that the one?

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #11 on: October 03, 2017, 06:38:22 PM »
Brian

Ticking the HTPS box doesn't seem to stick in WD 10.37S54.  If you set it, close the WU control panel using the Open button and then re-open it then the HTPS box becomes unset.

Online Weather Display

  • Posts: 81,909
  • Davis VP2
  • New Zealand
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Weather Display
Re: Weather Underground PWS protocol
« Reply #12 on: October 04, 2017, 04:41:29 AM »
ah, ops
I will fix /test that and let you know

Online Weather Display

  • Posts: 81,909
  • Davis VP2
  • New Zealand
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Weather Display

Offline decix

  • Posts: 28
  • Preston, UK
  • OS/Browser:
  • Win NT 10.0
  • Chrome 61.0.3163.100
    • Preston Weather
Re: Weather Underground PWS protocol
« Reply #14 on: October 04, 2017, 10:00:05 PM »
Brian

I've run the WD test version for about half an hour with WU updates via HTTPS every 5 minutes - so far, so good.  I'll leave it running overnight and post an update in the morning.