So, rethorical question, how many people don't know that and have login credentials sent over a plaintext link (inside your provider but even then, between CF and your site)?