Can Traffic spy see the username and password of client send to broker when broker don't use TLS ?

1 Answer 1


Yes, without TLS the CONNECT packet is sent in the clear so all of it's content can be seen.

A full breakdown of how to decode the CONNECT packet can be found here

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.