3 ms·

Microsoft already has one, on a non-SSL page: http://www.microsoft.com/uk/protect/yourself/password/checker.mspx http://www.microsoft.com/uk/protect/yourself/p

• arethuza 16y ago
  I checked with Fiddler and it's client side only - no outgoing traffic back to a server! Still, I don't think this is a great idea. You could harvest a lot of passwords with a page like this.
  • nodata 16y ago
    But it doesn't matter if it's client side only: * It might not be in future * It's not using SSL, so anybody in between can make it stop being client side only whenever they like * It's a terrible, terrible idea to teach users to trust things like this.