Using over non-https connection.
TLS is recommended!