Yeah you’re right, URL was unencrypted along with some others. Doesn’t seem critical if we’re talking Facebook and twitter but becomes problematic with human r

Yeah you’re right, URL was unencrypted along with some others. Doesn’t seem critical if we’re talking Facebook and twitter but becomes problematic with human rights orgs and the like. The justification was that it was used to match login fields against vault items. I’m no crypto expert but it seemed flimsy to me