NoCat and IE 7.0

hi all,

with the introduction of Internet Explorer 7.0 popup-windows from sites not placed in "thrusted sites" will display an addressbar in
the top of the popupwindow. The addressbar reveils the current url of the window... which SADLY displays the logged-on users data,
including his/her's password.... why isn't the password encrypted?

Is there a way of encryptng it?

I use LDAP as auth-protocol.

Sincerely
- Jesper