When an application sends your keystrokes (or an accidental/unintended paste) off to a third-party without your consent, I think it is fair to call that a keylogger.
> …by this logic any text field that does something with your input before explicitly pressing a submit button is also a keylogger.
I respectfully disagree, since there are many things a text field can do with input which doesn't violate the user privacy (e.g. local spell-checking, input sanitization).
My objection is with the automatic transmission of keystrokes to third-parties without the explicit consent of the user. Whether we agree to call this "key-logging" or not isn't as important.
We can both agree that this could result in the unintended sharing of very sensitive data—that's the point I'm trying to make. Cheers!
