Indeed, HTTPS is really easy if you do it in your nginx/apache config. Also StartSSL do free SSL certificates that are recognised by people's browsers.