This common method encrypts usernames and passwords, but reverts to the normal Web protocol, HTTP, for everything else.

CNN: Why Google's data collection snafu could be good for Gmail

Microsoft said it affected IE with Service Pack 1 installed but only if visiting websites that use data compression and the widely used version 1.1 of the HTTP web protocols.

BBC: NEWS | Technology | Hackers target latest Windows fix