# Recommand way is HTTP but is it safe?

**URL:** <https://forum.heroiclabs.com/t/recommand-way-is-http-but-is-it-safe/4043>\
**Category:** Runtime Framework\
**Tags:** server-framework, authentication\
**Created:** [July 11, 2023, 8:37am UTC](https://forum.heroiclabs.com/t/recommand-way-is-http-but-is-it-safe/4043 "2023-07-11T08:37:09Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![braty14](https://avatars.discourse-cdn.com/v4/letter/b/3be4f8/32.png) [@braty14](https://forum.heroiclabs.com/u/braty14)\
**Post date:** [July 11, 2023, 8:37am UTC](https://forum.heroiclabs.com/t/recommand-way-is-http-but-is-it-safe/4043/1 "2023-07-11T08:37:10Z")

</div>

I searched the topic a bit, nothing much came out but this short topic. [Connect to Nakama with https instead of http](https://forum.heroiclabs.com/t/connect-to-nakama-with-https-instead-of-http/1328)

For game information such as I moved the enemy this much, shooted this bullet etc. it is not important so http makes sense but for sensitive information like authentication, in game chat or even IAP info, would like to use https. How can and should I do that? Especially nakama provides so many custom authentication service and logic but since it is http it is spyable. Any insight would be appreciated.

---

<div class="post-metadata">

**Author:** ![sesposito](https://sea2.discourse-cdn.com/flex020/user_avatar/forum.heroiclabs.com/sesposito/32/2594_2.png) [@sesposito](https://forum.heroiclabs.com/u/sesposito)\
**Post date:** [July 11, 2023, 10:47am UTC](https://forum.heroiclabs.com/t/recommand-way-is-http-but-is-it-safe/4043/2 "2023-07-11T10:47:22Z")

</div>

Hello @braty14,

You should most definitely set up Nakama behind HTTPS for a production deployment.

Please have a look at [Connect to Nakama with https instead of http - #2 by novabyte](https://forum.heroiclabs.com/t/connect-to-nakama-with-https-instead-of-http/1328/2)

---

<div class="post-metadata">

**Author:** ![braty14](https://avatars.discourse-cdn.com/v4/letter/b/3be4f8/32.png) [@braty14](https://forum.heroiclabs.com/u/braty14)\
**Post date:** [July 11, 2023, 12:17pm UTC](https://forum.heroiclabs.com/t/recommand-way-is-http-but-is-it-safe/4043/3 "2023-07-11T12:17:47Z")

</div>

Yes, kind of a new to online stuff. Did my research and it seems I have to use a load balancer for SSL termination. Actually I also posted the same link in the post but took me a while to understand what it means. 😃