Login Authentication Mechanism - Proper way for client to send username/password
===

I am curious how to properly send username and password from a website login form to a server.

If I just send the username and password without hashing them to an https server how exposed is the password I send in a **POST** request to somebody sniffing the package and finding out the password? The server is https enabled.

What would be the proper methodology to do this? 