title: Password in the header is unencrypted via POST, how can it be secure?
body: <p>Recently I have just noticed a problem of my internet banking service.</p>
  
  <p>When I use Chrome Inspect to check the POST request, in the Form Data section, the password I entered is totally unencrypted. I just fear that someone fetch the header can see my userid and password directly.</p>
  
  <p>However, my friend told me that, as it use HTTPS, only the sender and receiver can see the data in the POST method, thus the password is still secure. Is that correct?</p>