## Summary: After creating the workspace, if victim clicks on forgot password then reset password link has been generated and sent over mail and that password link is unsecured http protocol. ## Steps To Reproduce: 1. Signup to a workspace 2. Navigate to https://h1-\*your-own-instance\*.cloud…