[yoo1I]

possibly intentional: https://www.nngroup.com/articles/stop-password-masking/

[jhasse]

This should still be implemented by the browsers, not hard-coded in HTML. Like Microsoft's implementation mentioned at the end ;)

[bbcbasic]

> It's just you, sitting all alone in your office, suffering reduced usability to protect against a non-issue.

And there the point to stop taking that article seriously.

The MS Solution is good though. I think it is the best. Better than the android/iphone flash up the last char for a second thing.