How secure is use this tool?

[joaquin-arrazola-jala]

Hello, I would like to know how secure is use this tool, regarding to the credentials used to login to the VPN, are the prompted login page goes by https?

[diomenezes]

I my case, I only use my Public IP

[yuezk]

@joaquin-arrazola-jala Yes, it will force to use HTTPS.

GlobalProtect-openconnect/GPClient/portalauthenticator.cpp

Lines 18 to 19 in 2761f75

	, preloginUrl("https://" + portal + "/global-protect/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100")
	, configUrl("https://" + portal + "/global-protect/getconfig.esp")

GlobalProtect-openconnect/GPClient/portalauthenticator.cpp

Lines 18 to 19 in 2761f75

	, preloginUrl("https://" + portal + "/global-protect/prelogin.esp?tmp=tmp&kerberos-support=yes&ipv6-support=yes&clientVer=4100")
	, configUrl("https://" + portal + "/global-protect/getconfig.esp")