isFromInsecureSource property

bool isFromInsecureSource

true when this configuration was retrieved over an unprotected connection, e.g. plain http://autoconfig.<domain>/.

Such a configuration may have been tampered with and can point to servers under the control of an attacker. Applications should show it to the user for confirmation before submitting any credentials.

Implementation

bool isFromInsecureSource = false;