> I imagine it would stop you from client-side warnings of password insecurity, but is there a bigger problem? The bigger problem is that passwords aren't half

> I imagine it would stop you from client-side warnings of password insecurity, but is there a bigger problem? The bigger problem is that passwords aren't half the sensitive data on the web, they're just the example people are using because everybody knows they need to be protected. If you protect the password from the script but it can still read your name and address, and your bank balance, and the private information you thought you were only sending to your spouse, have we actually solved the problem? No.