Any updates on this? This is kinda ridiculous that at the very least the login form is not secured by SSL. Majir has put a great description of the potential problems this can cause, starting from one using the same password on multiple web sites and it leaking from here to somebody impersonating somebody else by taking a session cookie. Also, you already have one certificate (https://kerbalspaceprogram.com/kspstore/index.php?p=22 - BTW that one expires on Nov 23th ) - one possibility is to change it to either wildcard or multi domain cert.
