Hmmm... for the HTTPS certificate. Assuming that a router exposes itself as &quot;myrouter.box&quot; in the LAN and the manufacturer obtains a CA-signed cert for it, it would not be a problem for the private key to be public?<p>At least in consumer space, the only threat I believe to be reasonable is your kids running an ARP poison attack to get the admin password of the router and unlocking the internet firewall - and any parent relying on technology instead of properly educating their kids deserves being owned that way imho.