Any time usernames and passwords are sent over plaintext, something is wrong. Some people could be using the same user/pass combo on other websites (Gmail..). T

Any time usernames and passwords are sent over plaintext, something is wrong. Some people could be using the same user/pass combo on other websites (Gmail..). They shouldn't be, but they do. Even if it were just the HN account hijacking, that could end up being pretty serious for some of the notable figures around here. Either way, it's just a best practice that should be implemented here (it's called Hacker News, ferchristsakes!)