3 ms·> Or at least don't do password reset via HTTP. Huh?by drivebyacct2 15y ago> Or at least don't do password reset via HTTP. Huh?jbarham 15y agoUse HTTPS for password reset, not (unencrypted) HTTP.