This avoids only man-in-the-middle attacks. The server itself is still vulnerable and requires additional protection.Why isn't the login on a secure server? Just curious.
Why not provide it as an option for those of us who have disabled the mix content warnings or are smart enough to determine if it can be ignored?
This avoids only man-in-the-middle attacks. The server itself is still vulnerable and requires additional protection.