---
title: Visualforce, Salesforce Sites, Or Communities Must Use HTTPS
description: "Impact Area Security Severity Medium Affected Element Org Config ## Rule ID **SF-0168** ## Impact Use of unencrypted http protocol can expose confidential data. ## Remediation Enable this setting. From Setup, enter “Session Settings” in the Quick Find box, then…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/salesforce-rules/visualforce-salesforce-sites-or-communities-must-use-https/"
updated: "2025-03-21"
category: Rules
---

# Visualforce, Salesforce Sites, Or Communities Must Use HTTPS

Impact Area

Security

Severity

Medium

           Affected Element

Org Config

## Rule ID

**SF-0168**

## Impact

Use of unencrypted http protocol can expose confidential data.

## Remediation

Enable this setting. From Setup, enter “Session Settings” in the Quick Find box, then select Session Settings. Then enable “Require secure connections (HTTPS)”.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-284 Improper Access Control](https://cwe.mitre.org/data/definitions/284.html).