There's a potential problem in the translation interface. It's possible to sign in through http instead of https [1], and it shouldn't be. [1] http://translate.fedoraproject.org/ New translators may not realise about it, and make their fas account accessible to a sniffer. kind regards Domingo Becker