I run an Audit on my website and it shows that “User credentials are sent in clear text”
Form authentication is enabled in my website and it should be accessed from anywhere.
How to send password in encrypted format?
is SSL the only option, I read around and found that enabling Digest authentication can do this also, is there any disadvantage if I change Basic to digest in IIS?
Use SSL