Comment by blainesch

I would feel a lot safer about sending passwords if the server couldn't decrypt them, or if the source code for this site was on github or some other OS platform.