3 ms·

NEVER EVER send a password as clear text. EVER. If that was a requirement, then the submitter should have said something.

• artmageddon 15y ago
  Just curious, how would you go about not sending out the password in cleartext? I understand WHY but I've never really figured out how to avoid doing so* *yeah, I realize I'm asking for trouble with this :)
  • ceejayoz 15y ago
    POST it to an HTTPS endpoint.
    • whileonebegin 15y ago
      How do we know the code isn't already posting to an HTTPS url?
      • ceejayoz 15y ago
        We don't. I'm simply answering the asked question - how does one securely transmit the user's password to a web application.