Terrible compared to what? http? I don't understand why we get big scary warnings from browsers for self signed https, but never a peep out of them when submitting the same form over http.
See detailed reply here: https://news.ycombinator.com/item?id=7826443