Mozilla Connect

because the login form is not hard-coded. You should trust online form will not send your password to the Mozilla server. For a completely related concept see my post: Effective methods for "binary transparency"

Why my idea isn't visible, here?