What is encrypted when you use http

ℹ️ Support
1

Hi All,

If you are using http, instead of https, is the Nextcloud authentication and the data still encrypted over the web?

Many thanks,
-T

2

If you’re curious, you could wireshark it, but I wouldn’t even consider not using HTTPS.

3

If you use Chrome or Firefox and activate network analysis with F12 you find the POST-Request:

https://cloud.server.tld/index.php/login

This request uses the parameter “password” in clear text.
This is for web applications normal.

4

Does the actual password get sent in clear text?

5

It seems so yes. You really should not use http for more or less anything today. It is really easy to deploy https in most environments

6

That is the end goal. Thank you all! :grinning: