[dangrossman]

Surprise, most sites don't use SSL.

Surprise, the DISQUS login/registration to post a comment on TechCrunch's article about this "gaping security hole" also sends your password in plaintext.

[thedz]

Just a note that we're working on improving our ssl support.