mario Site Admin

Joined: 03 Oct 2006 Posts: 7240
|
Posted: Sat Mar 03, 2007 6:37 pm Post subject: |
|
|
You are not, it is secure and over SSL.
If you take a look at the page source, you will see that the target url begins with "https". So what happens here is - your password is sent over SSL to a page that generates a session id, and then your session is redirected again to regular http.
Your password is never sent as plain text, only over SSL. |
|