My network administrator has concerns regarding username and password values being entered on an .aspx page and then posted for forms authentication. His concern is that the actual values entered in the text boxes can somehow be sniffed as the page is posted to the server. I don not yet know enough about .NET or Internet explorer to support or dispute his claims of this being unsafe.

Nay help would be greatly appreciated...