[eru]

The canned argument is: No known security problem does not mean no security problem.

[tptacek]

That's not the argument here, though. The proposed solution --- and the one that Meebo uses, when you don't use their SSL login --- has a glaring security problem.

[volida]

i wasn't proposing it, i asked if thats what you meant

[volida]

i was implying, how come they didn't run into security problem when they are practising a non-safe method? why do they expose so many users to such danger without their knowledge?