Tweet · 18 Oct 2017, 13:31 UTC

Pretty much all the worrying non-HTTP stuff that I’ve noticed does not use fancy new features. It’s just fucking passwords over HTTP.