“It wouldn’t be all that hard to sniff traffic to get someone’s user/password with this.” Isn’t that what https is for?