Is FOP2 Extension safe?

Question

Accepted Answer

FOP2 Extension is medium risk. When you use the FOP2 Extension for click-to-call or PBX control, it opens a cleartext WebSocket connection to the configured PBX host. The extension sends password-derived authentication values, stored configuration, and call-control content such as dialed page numbers over ws:// instead of an encrypted wss:// channel.

Is FOP2 Extension safe?

Findings