GNOME Bugzilla – Bug 639269
Auth done in HTTP not HTTPS
Last modified: 2013-03-06 13:50:55 UTC
The passwords are being sent in clear text. For people using the same password in many places this can lead to non-trivial problems.
I just filed a bug for that: #667231 Thought that your claim that non-trivial problems for reusing the password for different services is orthogonal to that: just use different passwords! ;)
Let's thank Andrea Veri :-)