I am really curious about how JDBC sends passwords to the server. While I understand that is simply an API and it depends on the implementation, are they usually hashed and then sent to server?
If I could see the password in plaintext using a tool like wireshark, does it mean that its because of poor implementation or its just the way JDBC works?
Can anyone give me an example with any db vendor? Say MySQL JDBC driver or Postgres JDBC driver?