In [this answer](https://security.stackexchange.com/a/96688/38069), the author states that it is possible to tell the length of your password, by sniffing your TLS packets. Is this true, and how would this be done in practice?