BTW, what about the security implication of this password-test-runs? Users are essentially giving their "other" passwords to the site, right? Obviously a benev

BTW, what about the security implication of this password-test-runs? Users are essentially giving their "other" passwords to the site, right? Obviously a benevolent site will NOT save/process those failed passwords, it may even take care to have them NOT stored in any logs... An malevolent site on the other hand may even trick you into providing it some of your other passwords to it... ...cache invalidation, naming things and secure authentication for a broad public