I'm designing a sensitive site and I want that login/passwd is not sent as plain text. I don't want to provide https connection or maintain a SSL certificate as it can easily be compromised on shared hosting.
For non-admin users login using openid will solve this issue but how do I do it for Admin(uid=1) ?
For admin login one way is to use a secured VPN of another country to login and once session cookie is placed I can close VPN and use my normal internet connection.
Any ideas?
Although this question isn't version specific but I need it for D6 site.