I currently use web3 and geth to develop dapps, and we know that web3 interacts with geth through json rpc. If we want to unlock an account through dapp, we need to enter the password in the dapp, and then web3 will unlock it through json rpc. I want to know when web3 uses the password provided by the user to send an unlock request to geth, will this password be hijacked by an intermediary? I personally think that json rpc is also transmitted in plain text, so I think json rpc is not safe, I don’t know if my understanding is correct.
Hope you can help me, thank you!