[RickS (Rick)]

Just looking quickly at the source for the login page it appears that passwords are not transmitted in the clear. A MD5 hash is sent instead. MD5 is not considered terribly secure these days but it's not like we're doing online banking here