github.com/khulnasoft-lab/defsec@v1.0.5-0.20230827010352-5e9f46893d95/avd_docs/aws/elasticsearch/AVD-AWS-0046/docs.md (about) 1 2 Plain HTTP is unencrypted and human-readable. This means that if a malicious actor was to eavesdrop on your connection, they would be able to see all of your data flowing back and forth. 3 4 You should use HTTPS, which is HTTP over an encrypted (TLS) connection, meaning eavesdroppers cannot read your traffic. 5 6 ### Impact 7 HTTP traffic can be intercepted and the contents read 8 9 <!-- DO NOT CHANGE --> 10 {{ remediationActions }} 11 12 ### Links 13 - https://docs.aws.amazon.com/elasticsearch-service/latest/developerguide/es-data-protection.html 14 15