Encrypted address?

From: Andrew (junk_at_rightofmind.com)
Date: 08/26/03 

Date: 26 Aug 2003 12:13:06 -0700

Hi,

I've got a password protected folder on my IIS with Basic Auth. I
have a custom login form which directs to the folder via the address
itself, i.e. 'http://username:password@www.mywebsite.com/login'. I am
using SSL to secure my data. My question is, is the username and
password still encrypted by the SSL now that it's included in the
address? Can prying eyes even see the address that is being accessed
at all?

Thanks

Quantcast