If want, credentials are stored using Mozilla Password Manager (like messaging accounts).

This plugin logs in zFiler services submitting by HTTP (POST method) user name and password (like authentication form on Web application, e.g. ISP Webmail).

Once a session opened, credentials are no more transmitted. Only session id is sent in further requests (upload POST request, access setup request...).