Do I need to use HTTPS to activate the software?

Question

PHP

Good afternoon

There is software that connects to server "A" for activation, updates, etc.

Is it worth connecting to server "A" via HTTPS?
If you can't connect via HTTPS, try to connect via HTTP?

In the function file_get_contents is used (without this the certificate error):

'ssl'   => ['verify_peer' => FALSE, 'verify_peer_name' => FALSE]

Thanks

Answer 1

Of course, it will be better through a secure connection, the program will be protected from illegal activation.
Well, you can also use HTTP, but only if you are sure that your program is well protected from data interception.

Answer 2

Better tunnel (VPN technology).
It is also good to use two-factor authorization (sms, enum).
If none of this is possible then https.
However, for two-factor without a tunnel, the use of https will not be superfluous.
But regardless of the data transfer methods used, you need to worry about encryption and the impossibility/difficulty of forging the transmitted data itself - due to a combination of factors: IP address + cookies + salted password hash, etc.