[Jibbs]

Right, but what about a malicious webmaster that wants to harvest passwords. Its very easy to change the software for just that reason. If people use the same user id and password from site to site it would be easy to collect them and try them at other sites.

Edit: Thufferin Thuccotash, Daffy already answered this