Re-design iNotes login page in such a way that passwords will not be shown as plaintext Merged

A customer's audit team has reported that when they use any Man-in-the-middle (MIM) tools such as Burp Suite tool, it shows the password entered on the login page as plain text.

Note that customer is already using TLS connection on HTTP with POST method which should tell us that the data being transported is encrypted and secured on both ends.

The customer wants the password field to be encrypted/hashed before the login credentials is POSTed to Domino server even with a TLS connection so the MIM wouldn't see a clear text password.

We also noted that with SAML with an IDP that provides this functionality, this can be achieved. But customer likes to see this addressed in the core domino product.