I know that http served https form target login is an anti-pattern. I was saying that a) firesheep does not have anything to do with passwords (which he implie

I know that http served https form target login is an anti-pattern. I was saying that a) firesheep does not have anything to do with passwords (which he implies it does) and b) it would be prevented with ssl anyways. I don't even know why he brought it up.