There's a potential problem in the translation interface.
It's possible to sign in through http instead of https [1], and it shouldn't be.
[1]
http://translate.fedoraproject.org/
New translators may not realise about it, and make their fas account
accessible to a sniffer.
kind regards
Domingo Becker