[dawnerd]

Not only that but the Privacy Policy is a straight up lie. No https yet:

"In addition, all sensitive/credit information you supply is encrypted via Secure Socket Layer (SSL) technology.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information."

I really like the service, but it's free to get https setup and takes just about 0 effort thanks to letsencrypt.

[flopit]

Yep, login with POST to http://www.taste.io/auth/local and creating an account (POST http://www.taste.io/api/users) are made without ssl. name, password and emails are sent in clear over the network.