I was watching my desktop application firewall when I opened the browser to log into my GL-AR300M. I saw an insecure port 80 connection to 22.214.171.124 before I typed my password. This is the GL.iNet domain.
What is happening here? The routers web interface should not make unnecessary connections to the internet. And when it must connect to a web site, the data should not be sent over an insecure, unencrypted channel because the traffic could be modified in transit.