Hotspot / Chrome PNA (Private Network Access)

RouterOS Security
1

Hello everyone,

We are producers and developers of the HSNM (Hotspot network manager) that integrates Mikrotik among various vendors.

Lately, many customers have reported that they are no longer able to log in (whether HTTP PAP, HTTP CHAP, or HTTPS) to Mikrotik (and non-Mikrotik) gateways via the Chrome desktop browser.

Everything seems to be related to a new Chrome security feature called PNA: https://developer.chrome.com/blog/private-network-access-preflight

In fact, when logging in via desktop, a request for access to private networks appears (similar to when the browser requests access to the webcam or microphone).

This is very annoying and frustrating for Hotspot networks.

PNA
PNA567×353 72.6 KB

How does Mikrotik intend to overcome this problem?
We have read in various documents that to overcome this, login procedures should contain the header Access-Control-Allow-Private-Network = true in order to accept requests to private networks.

Is anyone already working on it or has anyone found a workaround?
Thanks.
Hsnm,

2

Edited post as it seems to be an ad. Link to removed.

The link points to information from 2022? What do you expect form Mikrotik to be done?
Have you contacted them with: https://mikrotik.com/support

We as users can to nothing. On the other hand there were no topics on such problems on the forum.
How to trigger the problem you describe?

3

First of all, thank you for your reply.

Yes, it is true that the link is from 2022, but the new policy began rolling out in 2025 and has been in full use in recent months, blocking and creating problems for any hotspot service.

With this new feature, a desktop user must click on “accept access to local devices” in order to log in to any hotspot service (not just ours).

We will open a ticket with Mikrotik support, but we wanted to know if any other forum users have found a way to overcome this frustrating issue for hotspot services.

4

Trying to UP a bit