Hacker News Reader

The other thing is that the login page is http rather than https.

It does support https, such as if you use https-everywhere which now works on chrome.

If you don't want to install a third party extension, you can also manually add domains to the HSTS* set via chrome://net-internals/#hsts