During a REST API security assessment, a penetration tester was able to sniff JSON content containing user credentials. The JSON structure was as follows: Assum...