- Joined
- Nov 6, 2020
- Messages
- 38
- Reaction score
- 7
Hi,
We noticed that in some situations it is possible to log in to the 3CX Web App and Management Console over HTTP. This is obviously an issue since HTTP isn't encrypted and someone can view our login information if it isn't encrypted. Although we know there is a way to force these web pages to use HTTPS instead of HTTP on our end, and are working on making this happen for own system, we believe it would be a good idea to implement some change in the 3CX Server and Web App software that forces these web pages to only use HTTPS to ensure security for all customers of 3CX.
We noticed that in some situations it is possible to log in to the 3CX Web App and Management Console over HTTP. This is obviously an issue since HTTP isn't encrypted and someone can view our login information if it isn't encrypted. Although we know there is a way to force these web pages to use HTTPS instead of HTTP on our end, and are working on making this happen for own system, we believe it would be a good idea to implement some change in the 3CX Server and Web App software that forces these web pages to only use HTTPS to ensure security for all customers of 3CX.
Upvote
1
