- Is my password sent unencrypted when using Phpmyadmin through http?
- If not, is there any downside using http compared to https?
If you are connecting to phpMyAdmin through
HTTP then your password (and all your data) is being sent unencrypted.
However, if the form you are using to enter your username/password is sent to an
HTTPS script (even though you might be on an unencrypted
HTTP page) then it is sent encrypted, but then you would expect to remain on
HTTPS for the duration of your session.
Username and password are sent as plain text during login. After this they are sent in encrypted format in cookies.
You can check this using LiveHTTP Headers plugin in Firefox for example.