Do I need a 2nd layer of encryption through secured site (HTTPS/SSL/TLS)?
For example, if I were to send a post request to a /login route, would that payload already be encrypted if the API URL is HTTPS? As far as I know, if it is in HTTPS, then the payload is already encrypted.
Another example is sending a post…