How to store user/pass securely in the browser?
Herring: Store it encrypted on their computer then decrypt it each time it's sent to you? Maybe I'm missing the problem.One way or another you're going to have to hold it as plaintext to submit it to the other site. It's nice to hold it only in RAM, but the vulnerability is always there.