mod_auth_radius README file says:

Using static passwords & RADIUS authentication over the web is a BAD
IDEA.  Everyone can sniff the passwords, as they're sent over the net
in the clear.  

If I serve the page over https, will it be secure then? Or is that not what is meant by the statement?

1 Answer 1


Yes, over https basic auth is secure. Additionally between the RADIUS server and the HTTP server the passwords are reversibly encrypted using the RADIUS shared secret.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.