passwords in the clear - minor editorial suggestions

"Principle advice" should be "principal advice"

"which are too difficult for the browser to analyze"
=>
"and scripts are difficult or impossible for the browser to analyze"

"provides a way for authentication between parties without transmitting"
=>
"an authentication method that transmits"

In 2.1.1 "Digest" => "Digest Authentication"

2.1.2 second password "SSL/TLS. Any page..."  -- this is a non sequitur.