Use the secure
.... A security alert window displays.
Click Yes in order to proceed.
That security alert is a warning that the HTTPS certificate is invalid. As best I can tell, nothing prevents an attacker from setting up a rogue AP to phish passwords intended for
login.html. Even more worrisome, if the attackers don't use SSL, Firefox is more likely to warn about a legitimate AP than a phising one!
Can anything be done here?