dae's weblog

There are lots of websites (including dae’s weblog) that allow you to log in using your Facebook account. It’s strange you get a pop up window that hardly shows you the URL, which means you don’t know if you’re really submitting your credentials to Facebook, unless you check it first. And since the Facebook window doesn’t use an SSL-certificate, your name and password are sent over the network in plain text anyway. Wouldn’t it be better if this window featured an SSL certificate and a bigger URL bar, that shows exactly where your name and password are going?