---
title: HTTPS Is Not Required To Log In To Or Access Salesforce
description: "**Impact area** Security **Severity** Medium **Affected element** Org Config ## Rule ID **SF-0170** ## Impact Use of unencrypted http protocol can expose confidential data. ## Remediation Switch to using https protocol. ### Time to fix 30 min ## References This…"
url: "https://community-staging.qualityclouds.com/qcdocs/qcr/rules/https-is-not-required-to-log-in-to-or-access-salesforce/"
updated: "2025-03-21"
category: Rules
---

# HTTPS Is Not Required To Log In To Or Access Salesforce

**Impact area**

Security

**Severity**

Medium

**Affected element**

Org Config

## Rule ID

**SF-0170**

## Impact

Use of unencrypted http protocol can expose confidential data.

## Remediation

Switch to using https protocol.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-284 Improper Access Control](https://cwe.mitre.org/data/definitions/284.html).