Both Fat Client and Thin Client have an option for secure connection. This can protect the user name and the password when logging in.
Furthermore, the user can request secure login by specifying the URL starting with HTTPS://. In this case, all requests will be sent in secure mode. However the requests will fail if there is not a certificate installed onto the server.