Is it safe for windows apps to update over HTTP Connection(Port 80)?

Bambi007

Hi,

I received this notification on BD. The app is OfficeClickToRun.Exe which is a legitimate app of Microsoft as I understand, but the HTTP connection makes me a little apprehensive to allow it to connect over the internet. This has tried to connect over HTTPS (443) in the past which I allow, but I'm not too sure about port 80 since it is unencrypted and thus interceptable.

What do you guys do when you encounter such alerts?

Petersl

https://community.bitdefender.com/en/discussion/105115/is-it-safe-for-windows-apps-to-update-over-http-connection-port-80

Hi @Bambi007

If you want to make sure your connection is encrypted you can update that app using the http instead of https with an VPN.

Note that when using a VPN your connection is encrypted but if you then also use the http instead of https then the VPN provider can see what you're connecting to and downloading over http, in this case just an update of an app.

So pick a VPN that you trust, you can also connect using the bitdefender VPN which you should have a limited version with 200MB daily traffic when you have bitdefender installed.