Before it hit the local ssl? You'd have more to worry about than a keylogger then.