: Can apache logs tell between encryped and un-encrypted traffic? Is there a way by just looking at the apache logs you can tell if the user-credentials is encrypted or not? Meaning some kind

@Eichhorn148

There is usually no indication in an apache access log that the request was served over https instead of http.

If you want to log the protocol, you can follow the instructions in the accepted answer of this question: serverfault.com/questions/359476/how-to-log-the-url-scheme-http-https-in-apache

Vote Up Vote Down