Anyway, this is your semi-regular reminder to always, always use HTTPS for your stuff. Yes, even that one. Yes, there's only one exception. Even if you think you have nothing to hide, your visitors or users may. Also, who doesn't want to give a giant middle finger to surveillance capitalism. Because I guarantee you they are sucking up all the unencrypted traffic for targeted ads, even still.