How is this randomized? I notice the generating javascript is sent in the clear (HTTP).