Is it necessary to encrypt the payload before sending out the post request