CROC Interview Question

How do you secure user's credentials during HTTP transfer?