Anyone have any additional information about this bit from the comments: > and even plaintext API requests from a popular password manager that were sent over

Anyone have any additional information about this bit from the comments: > and even plaintext API requests from a popular password manager that were sent over https (!!).