[josm-dev] shocking - unsecure password sending!

[Jonathan Bennett]

stefan at binaervarianz.de wrote:
> HTTPS can be done with certificates free of charge, as well as self signed
> certificates as well as without certificates at all.
> The original question asked for encryption, not authentication. 

Of course. There wouldn't be any problem with non-technical people not
understanding what's going on when their browser starts screaming about
a security problem at them when they try to register at openstreetmap.org.

Oh no.