Revision history [back]

If your question is about sagenb.org website, then yes, the password is sent in plain text. You can see it by looking at the source of the page, the login form is as follows <input type="password" name="password" size="15" /> which corresponds to plain text submission (the passwod type only ensures that the password will not appear on the browser's screen, that will show stars instead of letters). If you are not convinced, you can install WIreshark and see contents of the HTTP connections, this is instructive.

If your question is about a Sage notebook you can launch from, it depends. If notebook() is called as is, then again the password is sent in plain text. If the notebook is called with the secure option set to True, then the connection is encrypted via SSL (HTTPS protocol) and your password does not travel in plain text.