A DNS takeover could compromise Twitter passwords

Without reading the article: this follows <i>directly</i> from "Twitter is typically reached via HTTP and does not require users to type <a href="https://" rel="nofollow">https://</a>.