FCC updates covered list to include foreign-made consumer routers
The FCC has moved to treat all foreign-made consumer Wi‑Fi routers as potential national security risks, effectively banning new models by default unless they obtain special approval from security agencies. Commenters question whether this will meaningfully improve security, arguing that vulnerabilities stem from industry-wide firmware practices rather than manufacturing location, and warning that the new approval process could become a tool for protectionism, corruption, or expanded surveillance. Many instead advocate for mandates around open or auditable firmware, long-term updates, and support for open-source router platforms as more effective safeguards.
Scope of the FCC Action
- Rule targets “consumer‑grade routers” intended for residential use and customer self‑installation, based on NIST definitions.
- Applies only to new models: previously FCC‑approved routers can still be imported, sold, and used.
- Foreign‑made consumer routers are effectively banned by default but can be sold if they obtain “Conditional Approval” from defense/homeland security agencies.
- Conditional approval requires detailed disclosure: ownership/jurisdiction, bill of materials with country of origin, update practices, and a plan to increase US manufacturing.
- Enterprise/professional routers are not covered by this blanket rule, though some Chinese vendors are separately restricted.
- Meaning of “produced in foreign countries” (final assembly vs components vs firmware) is unclear and seen as a likely loophole target.
Availability of US‑Made Routers
- Multiple comments question whether any consumer‑grade routers are truly produced in the US; even US brands rely on foreign manufacturing.
- Some mention niche or related US‑assembled products, but no clear, widely available consumer router line is identified.
Security vs Country of Manufacture
- Many argue router insecurity stems from bad firmware practices, not geography, and note US and European vendors also ship insecure devices.
- Others claim foreign state pressure (especially from China) can exploit “accidental” vulnerabilities as covert backdoors, and see origin as relevant.
- Several note there’s no robust way for typical users to verify firmware or detect tampering, regardless of origin.
Open Firmware, Updates, and Standards
- Strong support for open or at least auditable firmware, and for the ability to replace OEM firmware (OpenWRT, etc.).
- Debate over whether mandating long‑term security updates, escrowed source/bonds, or open replacement firmware is more realistic.
- Some blame earlier FCC rules (e.g., RF compliance) for indirectly discouraging open firmware on modern Wi‑Fi hardware.
Regulatory Capture, Corruption, and Surveillance Concerns
- Many see this as protectionism or a “pay‑to‑play” scheme where approvals become leverage for tariffs, bribes, or industrial policy.
- Others fear it enables greater domestic surveillance and potential government control over home networking gear, rather than improving security.
Consumer Impact and Workarounds
- Expectation of higher prices and reduced choice in the US market.
- Some plan to stockpile existing open‑firmware‑friendly routers or move to small general‑purpose computers (e.g., mini‑PCs, SBCs) running open OSes as routers.