infl0

Sign-in uses SRP-6a: your password is not sent to the server (use HTTPS in production).