<div>
<div class="content wysiwyg-content">
I have created an Amazon S3-compatible server that is being used purely for backing up my data (using ARQ, etc.) &nbsp; However, I am only able to connect to it using HTTP as a URL not HTTPS. &nbsp; If I use HTTP (not HTTPS) as my URL, are my S3 credentials and data transmitted in plain text, or is encrypted? &nbsp;<br />
<br />
Thanks.
</div>
</div>


I have created an Amazon S3-compatible server that is being used purely for backing up my data (using ARQ, etc.)   However, I am only able to connect to it using HTTP as a URL not HTTPS.   If I use HTTP (not HTTPS) as my URL, are my S3 credentials and data transmitted in plain text, or is encrypted?  

Thanks.

Security Question about using HTTP to connect to a S3-Compatible Server

HTTPS is a protocol for secure communication over a computer network which is widely used on the Internet. HTTPS consists of communication over Hypertext Transfer Protocol (HTTP) within a connection encrypted by Transport Layer Security (TLS) or its predecessor, Secure Sockets Layer (SSL). The main motivation for HTTPS is authentication of the visited website and to protect the privacy and integrity of the exchanged data. HTTPS is widely used for protecting page authenticity on all types of websites, securing accounts and keeping user communications, identity and web browsing private.

SSL / HTTPS

Security is the protection of information systems from theft or damage to the hardware, the software, and the information on them, as well as from disruption or misdirection of the services they provide. The main goal of security is protecting assets, and an asset is anything of value and worthy of protection.  Information Security is a discipline of protecting information assets from threats through safeguards to achieve the objectives of confidentiality, integrity, and availability or CIA for short. On the other hand, disclosure, alteration, and disruption (DAD) compromise the security objectives.