Microsoft says, "Send us your passwords!"
Update 8/2010: At some point this was fixed and now redirects to HTTPS...
Microsoft offers an online tool to check the strength of the password you're planning on using for Windows. Great - only, the site does not use SSL, which means the password you're planning on using gets sent in the clear over the Internet. Not so great.
