What does HRESULT 0x80072F0B (WININET_E_POST_IS_NON_SECURE) mean?

Status / error code:

Category:

Constant name:

Source:

Facility:

Operating System:

Description:

Data is being posted over a non-secure connection.

Previous	Next
WININET_E_CHG_POST_IS_NON_SECURE	WININET_E_CLIENT_AUTH_CERT_NEEDED

WININET_E_POST_IS_NON_SECURE

WININET_E_POST_IS_NON_SECURE is a WinINet HRESULT. It means that the operation would send POST data through HTTP rather than HTTPS. This can expose form data, tokens, credentials, or other request content to interception or modification.

What to check

Use an HTTPS endpoint and verify that the final request URL is secure after redirects.
Do not send credentials, session identifiers or sensitive request bodies over HTTP.
Correct hard-coded URLs, proxy rewriting and server-generated form actions that point to an insecure scheme.

Microsoft: WinINet overview

Looking for a different code? Search another status or error code.