UK government's password checker sends plaintext password in the URL over HTTP
Yes this is terrible...but it isn't the "UK Government" its a private corporation as per:
<a href="https://www.getsafeonline.org/about-us/" rel="nofollow">https://www.getsafeonline.org/about-us/</a><p>It also does work over https:
<a href="https://www.getsafeonline.org/themes/passwrdcheck/index.html" rel="nofollow">https://www.getsafeonline.org/themes/passwrdcheck/index.html</a><p>So I'm pretty sure this is just the fact they failed to setup the redirect. Rather than mocking them on Hacker News, we should just tell them they broke that part of their setup at some point and should fix it?<p>EDIT:<p>Tried to contact them, got a "The form you submitted contained the following errors<p>Missing Data.(DIFFERENT_IP)"<p>error which has nothing to do with the form I submitted. XD<p>Could someone contact them by their contact us page to get this fixed?