4 ms·

Your unencrypted (or just unauthenticated) HTML page might suddenly start sending the password you enter elsewhere...

• pdx 9y ago
  Really, how? Because somebody compromised the server? So what? If they did that, all bets are off.
  • dpark 9y ago
    No, because someone MITMs your insecure channel and serves you a malicious page that steals your password and the unencrypted data.