I am talking about what happens when you enter your name and password: the name and password are sent as clear text. This is before cookies are created.