# Elastic Agent RUM - Cryptography **URL:** \ **Category:** Elastic Agent\ **Tags:** elastic-stack-monitoring\ **Created:** [October 23, 2023, 1:01pm UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568 "2023-10-23T13:01:13Z")\ **Posts on this page:** 6\ **Page:** 1
**Author:** ![Gelinski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gelinski/32/142412_2.png) [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Post date:** [October 23, 2023, 1:01pm UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/1 "2023-10-23T13:01:13Z")
Hello folks, What is the algorithm used to encrypt data between Elastic Agent RUM and APM server? Thanks, Matheus ---
**Author:** ![Gelinski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gelinski/32/142412_2.png) [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Post date:** [November 13, 2023, 7:08pm UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/2 "2023-11-13T19:08:26Z")
Anyone? ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [November 13, 2023, 8:49pm UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/3 "2023-11-13T20:49:50Z")
Not sure what you are asking / trying to figure out. Should you choose, the connection between the Agent and APM Server is over HTTPS/SSL. No other "encryption" is used, as far as I know. What are you looking for the TLS version? Perhaps you are looking for [TLS Versions](https://www.elastic.co/guide/en/apm/guide/current/agent-server-ssl.html#_supported_protocol_versions) and [Ciphers for TLS](https://www.elastic.co/guide/en/apm/guide/current/agent-server-ssl.html#_cipher_suites_for_tls_connections) ---
**Author:** ![Gelinski](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/gelinski/32/142412_2.png) [@Gelinski](https://discuss.elastic.co/u/Gelinski)\ **Post date:** [November 14, 2023, 3:06am UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/4 "2023-11-14T03:06:37Z")
Hello Stephen, My question is more related to the payload that is sent to an Elastic APM Server. I dont know if there is something on Agent's code that keeps the RUM data safe while sending it to an APM server, even if I use an HTTP connection. That logic is what I am looking for. Thanks in advance, Matheus ---
**Author:** ![stephenb](https://sea2.discourse-cdn.com/elastic/user_avatar/discuss.elastic.co/stephenb/32/40856_2.png) [@stephenb](https://discuss.elastic.co/u/stephenb)\ **Post date:** [November 14, 2023, 3:36am UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/5 "2023-11-14T03:36:15Z")
No the payload is plain text / json, that is why we highly recommend HTTPS / TLS for encryption in transit between the RUM agent and the APM Server If you choose to Only use HTTP the payload will be clear text / json So to be precise you need to setup SSL on the APM server then configure RUM Agent `serverUrl` to that HTTPS endpoint of the APM server. ---
**Author:** ![system](https://us1.discourse-cdn.com/elastic/original/3X/1/a/1ac57faf039f6b580b3f104ef42a2a89e41014de.png) [@system](https://discuss.elastic.co/u/system)\ **Post date:** [December 12, 2023, 3:36am UTC](https://discuss.elastic.co/t/elastic-agent-rum-cryptography/345568/6 "2023-12-12T03:36:20Z")
This topic was automatically closed 28 days after the last reply. New replies are no longer allowed.