Is Twitter really submitting my password securely?
Sunday, July 20th, 2008So I was signing up for a Twitter account today and noticed something. After choosing a username and password, I was taken to an invitation page. If you look at this picture it clearly states that my password will be submitted securely.
How? I noticed in my URL bar there was no https in front of twitter.com, so I pulled up the source code to see if was being passed to an encrypted form. The form url was:
<form action=“/invitations/fetch_contacts” method=“post”>
Can anyone explain how twitter is securely handling my email password if it is being submitted without (or to) a secure https connection?