World of EUC

no experience, but interested definitely!

Without encryption it’s simply “plain text” secured in “transmission” only via TLS :man-shrugging::skin-tone-2: 

apparently the data entered in the field itself gets encrypted, before it's squeezed in the TLS pipe

so if someone is able to extract your TLS traffic, then they wouldn't still be able to read your credentials

Check payload via MS Edge Dev Tools. In my case I can see user name / password as clear text. Fo websites with encryption for credentials (some banks - not all) I can see encrypted password. 