The Javascript alert implies a secure server, but I'm not buying it.