May I send password directly to server without encrypt

I would like to build a user management system. I think it's not secure to send user's password from browsers to servers over HTTP. But I'm not sure if it's secure to send message to servers over HTTPS. Whether the password can be attack if using HTTPS

Thanks