While I like the concept, doesn't the fact that the site isn't using https defeat the purpose?