In respect to the KRACK situation, and the need to use "https" as much as possible, it would really be nice if the Router OS (and routers) come with a "self-signed https certificate" like most of the other vendors equipment does! This would allow immediate use of HTTPS as the login. Additional certificates could still be uploaded and installed as usual !

You can already generate a self-sighed certificate using the RouterOS itself.