@admins

Any option of securing AO with https? As it stands, it's dangerously vulnerable to man in the middle attacks. There's enough security (email verification for any changes) that I'm not worried about my account being taken over, but I have had to make a habit of only using temporary passwords and avoiding PMing any personal details.

I'm sure if there's a paid/supporter option, the community would offset the cost. I'd certainly donate to help.