I am testing Mobile Device Management.
Here, the Admin needs to publish WiFi configurations (SSID, Password, Security Type etc.) to the mobile over the air. So what should the approach be of sending the wifi password to the device? (i.e. it should be encrypted on server and decrypted on the device)
When I intercepted the request in burp, I am able to see the wifi password in plain text, but developers are saying it is okay because HTTPS was used.
What are the other ways if developer doesn't encrypt the wifi password?