[justinschuh]

Tom's point is that you're serving the JavaScript and HTML over HTTP. So, the entire site can be man-in-the-middled.

[Zash]

Quickly, someone, make an identical looking site that actually uploads whatever you drop on it! ;)