If my application is sending credentials to an auth server over https, is there any real benefit of encrypting it (using RSA for example) before sending it to the auth server? Or is the benefit so minimal I may as well just send it as plaintext?

marked as duplicate by Steffen Ullrich tls Aug 2 '17 at 20:54

This question has been asked before and already has an answer. If those answers do not fully address your question, please ask a new question.


There would only be benefit if for some reason you can't trust that the TLS connection is secure, in which case you would be much better off fixing the TLS connection.

Probably a duplicate of For an HTTPS web application, is it worthwhile to encrypt the password before POSTing it, to keep a MITM attacker from harversting it?

Not the answer you're looking for? Browse other questions tagged or ask your own question.