I have one bugzilla setup working with me. I have hosted the same on apache. When we login to bugzilla, it sends the POST request Form Data which has password as plain text.
Bugzilla_login:email@example.com Bugzilla_password:test Bugzilla_login_token: GoAheadAndLogIn:Log in
I feel this is risky and will adhere the security policies.
Is there any way to hide this plain text password?