If a user lands onto a non-https login page. When a user signs in, the action is pointed to a https url. My question is - is the users information encrypted? Is there a way to sniff and grab the users information?
User on login page -> router/internet (info is unencrypted) (users on same network can grab your information) -> https://url (info becomes encrypted)