The pega.web.config.encrypt setting for an Pega Web Mashup gadget enables or disables URL obfuscation of the HTTP requests sent by Pega Web Mashup gadgets to the Pega 7 Platform server. URL obfuscation is an encoding technique that scrambles the characters in a URL or query string as a security measure, which makes the URL contents less easily interpreted by people or HTTP "sniffers". By default, pega.web.config.encrypt is set to false, and URL encryption for the Pega Web Mashup deployment is disabled.
When pega.web.config.encrypt is set to true, the prconfig.xml setting initialization/urlencryption for the Pega 7 Platform node should also be set to true. Additionally, you must deploy the Pega Web Mashup Gateway servlet if you want to enable URL obfuscation.
The Pega Web Mashup Gateway servlet is required if you want to use URL obfuscation with your Pega Web Mashup gadget. The Pega Web Mashup Gateway is a servlet that manages the HTTP traffic between the Pega gadgets and the Pega 7 Platform application on the web node.
i'm trying it on version 8.3. also don't think it's related to encryption because when i'm not passing the user id password it's opening till the pega login page. after if i'm giving login pw it's able to login but if i'm giving user id pw in param it's showing http 400.
Also i'm generating mashup code using OOTB channel option.