I\'m currently working on a PHP OpenID provider that will work over HTTPS (hence SSL encrypted). Is it wrong for me to transmit the password as plain text? HTTP
It is safe. That's how the entire web works. All passwords in forms are always sent in plain text, so its up to HTTPS to secure it.