I'm using the ESRI provided proxy with my WAB app to supply credentials for secured services. I've done this with ArcGIS Online resources, but now I'm trying to do it with my ArcGIS Server services, using token authentication. So my question is, when using the proxy to provide credentials for generating a token, do I have to make sure HTTPS is being used when making requests for these services to keep the username/password and token secret? Does the proxy make HTTPS unnecessary?
