Why was the situation with the page that does not ask for credentials and does n...

		kovek on Sept 11, 2018 \| parent \| context \| favorite \| on: The Effectiveness of Publicly Shaming Bad Security Why was the situation with the page that does not ask for credentials and does not use https considered unsafe? Is the worry that a man in the middle could change the Login link to a different website?

Yes, exactly.