by Willy Lee.
Since the app is currently posting them as a GET request, the passwords are sent in the URI and HTTPS doesn't do anything to protect that.
Since the app is currently posting them as a GET request, the passwords are sent in the URI and HTTPS doesn't do anything to protect that.