Why is AJAX authentication through HTTP considered to be non secure?
Lets consider next scenario: assume I have a web app, and authentication of users is performed through a modal dialog window (lets say, that when a user clicks login button, ajax request is sent and depending on the callback I either close the window or display an error), and I use **only HTTP** protocol. Why is it considered to be not secure way to do things?
Why is AJAX authentication through HTTP considered to be non secure?
===

Lets consider next scenario: assume I have a web app, and authentication of users is performed through a modal dialog window (lets say, that when a user clicks login button, ajax request is sent and depending on the callback I either close the window or display an error), and I use **only HTTP** protocol. Why is it considered to be not secure way to do things?