Maya’s mouth went dry. “Who is this?”
Yes—the password is encrypted during transmission because of TLS. However, it remains exposed in browser history, server logs, and the Referer header. http url user password
In this example:
On the screen, the cursor still blinked. Maya’s mouth went dry
Thus, a complete example looks like: