I\'m currently working on a PHP OpenID provider that will work over HTTPS (hence SSL encrypted). Is it wrong for me to transmit the password as plain text? HTTP
If HTTP is disabled, and you only use HTTPS, then you're not really transmitting the password as plain text anyway.