HTTPS creates the server's password file

HTTPS protects the simply encoded credentials while they travel over the network

HTTPS removes the need for usernames and passwords

Nginx ignores location blocks unless HTTPS is enabled