What security measures are required when transmitting passwords?

Send passwords only over HTTPS, in the POST body, never shown on screen or written to logs.

Requirements:

• HTTPS only - encrypts data in transit
• POST method - passwords in body, not URL
• Password input type - shows dots, not characters
• No logging - never log password values

Passwords are visible in the HTTP request body, so without encryption (HTTPS), anyone on the network can intercept them.