3 ms·

Because the main login is HTTPS-secure (I would hope - for a bank), but the change-password feature is not.

• StavrosK 11y ago
  Oh, you mean the account recovery page, not one that requires the old password to change to a new one. I see.