[mjgoins]

It's kind of amazing that it wasn't like this from the start. Unsecured coffe shop wifi + http = everyone in the room can grab your password.

[maukdaddy]

No. GMail's login page is always HTTPS so no one in the coffee shop can grab your password.

However, all the mail is in the clear. So if some crappy website sends your password via email, then someone can can grab it.

[wallflower]

I'd donate towards an SSL certificate for news.yc

[flogic]

Which can is just as bad.

[pwmanagerdied]

Bad minus being able to directly sniff your password equals less bad, not just as bad.