I know. We haven't added SSL to our site. That's one reason we are still in beta.

My partner and I are finishing up a CLI app and then SSL comes after that. We are hoping to integrate nicely with something like letsencrypt.org, but we don't have a working solution yet.

I know from experience that HTTPS setup isn't as easy, nice, or cheap as it should be and we plan to fix that if possible for static sites.