HTTPS Is Not Required To Log In To Or Access Salesforce

< 1 min read

Impact area

Security

Severity

Medium

Affected element

Org Config

Rule ID #

SF-0170

Impact #

Use of unencrypted http protocol can expose confidential data.

Remediation #

Switch to using https protocol.

Time to fix #

30 min

References #

This rule is linked to Common Weakness Enumeration CWE-284 Improper Access Control.

Updated on March 21, 2025
Was it helpful ?