Our cryptography lounge has been frozen due to inactivity. I feel it is important it be revived, but after some searching on MSO it appears only moderators can unfreeze rooms. Can we reopen the room?
@ThomasPornin Oh, I did not know that. They asked me whether I wanted to help with the moderation of crypto, without giving any background information.
This is wrong. Even on http://www.facebook.com the form points to https. So unless an attacker manipulates the html-code, the credentials are not sent in plain text.
@RoryAlsop, the recent blog post says "Well that’s good for them but they forget that often, if you do not explicitly state https for the facebook login page, your password and username is sent PLAIN TEXT over the internet. "