[aniketh]

wouldn't that just be defeated if the form post was intercepted?

[noonespecial]

Before it hit the local ssl? You'd have more to worry about than a keylogger then.