Is ssl enough to secure data?

Question

Information Security

I am learning programming by writing a simple web application with authorization. Now I understand the basics of security. And some moments are confusing - for example, by default, the password is transmitted to the server in unencrypted form. Is this normal practice? I go on the Internet and everything that I dug up - a) on the server, the password for storage is hashed; b) use ssl to connect. is that enough?

Answer 1

A properly configured ssl will protect the data during transmission between the client and the server. And data storage has nothing to do with it.

Answer 2

The password is transmitted unencrypted - yes. Because otherwise there is no way to check it. But usually it is transmitted over an encrypted channel that was previously installed.