[brendoncrawford]

All of their http traffic redirects to https.

[trebor]

I didn't mean in reference to their site, but how the end-user transmits the link to a recipient.

[asdfaoeu]

The idea is that would be detectable because the recipient would no longer be able to view the actual link and the password can be changed again.