How good is the internet security when using the WinCC OA Web Client? User administration at the WinCC OA Web Client?

When starting the http Servers in the Control-Script webclient_http.ctl you can transfer an authentication method for the Web Server when calling up the function httpServer (...) via the parameters authRequired or authMethod (see Help). As standard, no authentication is required. In this case, any user who creates a connection to the WinC OA Project via the Web Client can see those Panels which are accessible via the Start Panel defined for the Web Client. If you wish to use the WinCC OA Registration instead, you must use the Standard Login Panel as the Start Panel (vision/login.pnl). In this case the Web Client always uses the WinCC OA User Management.
NOTE: Take care with sensitive data -> the standard only has limited security!
As an alternative or in addition, if necessary, the http Server can already be protected from prohibited access. To do this, when calling up the function http Server (...), the TRUE value of authRequired and the "Basic" value for authMethod must be transferred. When creating the connection to the http Server, the login and password for a WinCC OA User stored in the Server Project must then be requested.