[zaarn]

You don't need to be a cryptographer to know that you don't do plaintext passwords.

[pvorb]

But it seems it wasn't obvious to bullen that this way the password is essentially sent in plain text. So yes, let your authentication be analyzed by an expert or use standard software.

[kingludite]

to state the obvious: there are other things you don't do