Are there plans to support https?
I think it is very ironic to have a site about IT security which itself has such a huge security issue.
Edit: In the mean time the situation got worse: Now accounts can be created directly on the login dispatch page. Since that page is loaded via http, an attacker may be able to modify it, to send a copy of the password elsewhere.
Edit 4: The Login/Creation page loads an iframe via a https connection, so a passive attacker cannot sniff the password. The ability to manipulate the http-traffic of the login-page is required in order to get rid of this https-iframe and do malicious things.