Sorry if this wasnt clear enough.
The issue is not weak or strong password. But passwords being sent over http vs https.
I can have the strongest password ever and if used to login over http it's open to anyone who knows how to sniff internet traffic.