I have some concerns on the way our current integration exists between salesforce and a system called WebMethods. Currently we do not use oauth or SSO for security. We pass the username and password from salesforce in apex callout to WebMethods. What I know is this connection is over a secure https and thus it does not have any security threats.
Does it means that the username and password and the request is sent over securely with encryption. How does it is secure with oauth or SSO since I read we need them to pass auth token instead of username and password. Does sending request through https keeps username password secure?