Analyzing an android app's traffic POST request, it sends some important pieces of data in the form of URL encoding. This is pretty easy to decode and get the data. The data is sent over HTTPS. But is it safe to perform URL encoding of the data? Though it is using HTTPS, it does not make it not susceptible to MITM attacks, I suppose. Or I am able to easily decode this URL encoding because I am viewing the traffic using Burp Suite? If not, the data should be encrypted and not encoded is what I think.
Kindly clarify this.