_:n539c8b620c424cd6883c5489388f1871xb1
<http://schema.org/text>
"If I didn't post this question properly please let me know. I'm new to Spiceworks and trying to learn.I have a C# WebAPI developed using Visual Studio 2017. The API has token based authentication (OAUTH) for all API calls with the exception of the initial login. I noticed while logging in that I could see my username and password being sent to the server via Fiddler. Even if I put the call over HTTPS I can still see the username and password plain as day. \r\n\r\nI noticed that many other websites, including Spiceworks, have this.\r\n\r\nShould this been encrypted somehow? Or am I able to see the data because I am logging in on the same machine that is running Fiddler? Would an outside machine not be able to see the data?"
<https://frontend.spiceworks.com/topic/2119096-c-web-api-login-information-in-plain-text?page=1#entry-7605055>