User credentials are sent in clear text in asp.net website
<p>I run an Audit on my website and it shows that  "User credentials are sent in clear text"</p>

<p>Form authentication is enabled in my website and it should be accessed from anywhere.</p>

<p>How to send password in encrypted format?</p>

<p>is SSL the only option, I read around and found that enabling Digest authentication can do this also, is there any disadvantage if I change Basic to digest in IIS?</p>
