Skip to content

Latest commit

 

History

History
35 lines (24 loc) · 861 Bytes

AvoidUsingAllowUnencryptedAuthentication.md

File metadata and controls

35 lines (24 loc) · 861 Bytes
Raw
description ms.date ms.topic title
Avoid sending credentials and secrets over unencrypted connections
02/28/2024
reference
AvoidUsingAllowUnencryptedAuthentication

AvoidUsingAllowUnencryptedAuthentication

Severity Level: Warning

Description

Avoid using the AllowUnencryptedAuthentication parameter of Invoke-WebRequest and Invoke-RestMethod. When using this parameter, the cmdlets send credentials and secrets over unencrypted connections. This should be avoided except for compatibility with legacy systems.

For more details, see Invoke-RestMethod.

How

Avoid using the AllowUnencryptedAuthentication parameter.

Example 1

Wrong

Invoke-WebRequest foo -AllowUnencryptedAuthentication

Correct

Invoke-WebRequest foo