"Sending each character of your password to the server, before you explicitly agree to submit" is quite another.