They would have to man in the middle the petition site to log you as it is in https. Can they do that for everybody just like that? I am not sure.