I'm confused. Isn't this just saying that WordPress.com sends it's cookies in the clear? I didn't think that was news; I thought they'd been doing that for years. It did kinda baffle me as to why they did that, but I assumed they were aware of it and had some architectural reason for not fixing it.