====== About Encryption ====== After flashing the hAP, this message will appear only once:
This node is not yet configured.
Go to the setup page and set your node name and password.
Click Save Changes, even if you didn't make any changes, then the node will reboot.

This device can be configured to either permit or prohibit known encrypted traffic on its RF link. It is up to the user to decide which is appropriate based on how it will be used and the license under which it will be operated. These rules vary by country, frequency, and intended use. You are encouraged to read and understand these rules before going further.

This device is pre-configured with no restrictions as to the type of data being passed.

Follow these steps if you wish to prohibit known encrypted traffic on the RF link. These instructions will disappear, so copy them for your reference:

  1. Setup your node name and password as instructed at the top of this page
  2. After you Save Changes allow your node to reboot
  3. Return to the Node Status page and navigate to Setup > Administration
  4. Obtain the blockknownencryption package from the AREDN™ website OR refresh the Package list (node must be connected to the internet)
  5. Install the blockknownencryption package by uploading it or choosing it from the package drop-down list
  6. Wait until the package installs and then reboot your node

 Section 47 (b) of the [[https://laws-lois.justice.gc.ca/eng/regulations/SOR-96-484/FullText.html |Radiocommunication Regulations]] stipulates that: **47** A person who operates radio apparatus in the amateur radio service may only: **(b)** use a code or cipher that is not secret * Unencrypted data uses a code that is not secret so it's not a problem * but encrypted data uses ciphers that are secret, so it's not allowed. To ensure that no encrypted data is transmitted on the air, ensure that you do **not** allow other mesh nodes to your your WAN. This setting is in the ''Advanced Configuration'': {{ wansettings.png }} /* To ensure that no encrypted data is transmitted on the air, install the ''blockknownencryption'' package from the ''Administration'' page: {{ blockknownencryption.png }} This should pretty much block any ''https'' addresses but it could have [[https://www.arednmesh.org/content/block-known-encryption |some issues]]. And here's a more [[https://www.arednmesh.org/content/when-can-i-allow-others-use-my-wan |technical discussion]]. */ Note that this might block ''ssh'' over RF but not over LAN. However, Telnet can be used over RF as it is not encrypted.