Website security problems (https not enforced)

[qqq]

When you visit http://www.fuelly.com, the site allows you to log in or change your password and submits that over http. Fuelly should enforce https at least for these actions, if not for the whole site. The workaround is to always visit https://www.fuelly.com instead.

[RobertV]

We may be moving to all https soon, but this has been noted for review.
Thanks!

[qqq]

Thanks for the response!

[shadowhand]

+1 for this... the login page is currently not forced to https, which is a big risk for anyone on public wifi networks.