By default, the iFolder Web Access server is configured to require SSL. All Web-browser-based communication to the Web Access server is encrypted by using the SSL protocol. In most deployments, this setting should not be changed because iFolder uses Forms-based authentication for browser communications, which means passwords are sent to the server in the clear. For information, see Configuring the Web Access Server for SSL Communications with Web Browsers
in the Novell iFolder 3.9.2 Administration Guide.