The main site should be using HTTPS

[pchapin]

HTTPS is now the accepted standard for all serious websites. It is likely that the site may be blocked of banned in some circumstances if we continue to run with unencrypted, unauthenticated HTTP.