Secure usable browser connections for intranet scenarios

Any device hosting their management interface on an HTTP connection, is announcing the users passwords on the internal network. 

The alternative is to host the management interface on a HTTPS connection. This option provides the assurances of encryption (the password is not passed in the clear), but the solution is unusable for most consumers because of the warnings generated. 

This whitepaper describes this problem.