I don't see how the situation you describe is avoidable, while retaining the ability for a user to automatically fill form fields. That inherently means that th

I don't see how the situation you describe is avoidable, while retaining the ability for a user to automatically fill form fields. That inherently means that the password will be unencrypted and stored for some time; what's the practical difference between sending it via loopback and any other method?