"The features missing to make it to a secure and stable version are:" ... "The JSON RPC server should be serving HTTPS instead HTTP."
Reply on news.ycombinator.com