title: Is it secure to put password in POST request?
body: <p>I developing web services,</p>
  
  <p>these services are <code>rest</code> services and are used by mobile application.</p>
  
  <p>for example, if the user wants to log in, he/she has to call this link</p>
  
  <p><code>mySever:myPort/login</code></p>
  
  <p>and in the post of the request, they use their passwords and usernames.</p>
  
  <p>is this way secure? </p>
  
  <h3> note that i change the password to sha256 before calling the web service </h3>
  
  <p>if this way not secure, can u suggest other options please?</p>