Answer:
the logins are unencrypted.
Step-by-step explanation:
It provides neither encryption nor tamper resistance. This means passwords are transmitted in clear and an attacker can sniff the passwords. And the attacker can also modify the traffic like injecting malware into downloads.