Is there a way by just looking at the apache logs you can tell if the user-credentials is encrypted or not? Meaning some kind of encryption e.g ssl or plain-text.


1 Answer 1


There is usually no indication in an apache access log that the request was served over https instead of http.

If you want to log the protocol, you can follow the instructions in the accepted answer of this question: https://serverfault.com/questions/359476/how-to-log-the-url-scheme-http-https-in-apache

  • what about the user who logged not using https?
    – asadz
    Feb 11, 2013 at 21:26
  • I want to alert on someone logging on http protocol?
    – asadz
    Feb 11, 2013 at 21:28
  • Are you asking about the login process for your site? If you started logging the protocol to your log files, you could see when a user used the url of your login process without https. Feb 11, 2013 at 21:34
  • how? the answer link you showed only refers to the case when https is used. You saying that activity would be seen in non-http e.g access log.
    – asadz
    Feb 11, 2013 at 21:36
  • 1
    I don't think I'm understanding what you are asking. It sounds to me that you have a site that supports both http and https and are trying to discover if users are using insecure login. If this isn't correct, please edit your question to clarify. Feb 11, 2013 at 23:13

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.