6 ms·
Then what's the point of using HTTPS? Heating the room?
by genericid 8y ago
Then what's the point of using HTTPS? Heating the room?
- jodrellblank 8y agoSee my other comment, but a) it encrypts more of the packets, b) helps with validating correct server, c) encrypts even if you end up authenticating without Kerberos somehow.
- srinathgs 8y agoWhen using HTTP for remoting, headers are not encrypted. But body is always encrypted when using NTLM, CredSSP or Kerberos - the GSSAPI supported protocols. If user doesn't want to use these and opts for basic auth or some other protocol that doesn't have encryption specified, https is useful.