wordpress clear text password and salt

Hi

Am I correct to say that even if we assign the secret keys in wp-config.php, wordpress still sending password as clear text over the internet? Hence, the net security is not improved. The secret keys are helpful only when the hacker reaches the server and able to steal the hashed passwords.

Thanks,
Narin