This is true. Also, you should be redirected to https when you go to /account if things are working how they're intended. I don't run the full thing through SSL quite yet, because I pull in content from lots of different sources (images, for example), and that would cause SSL warnings.
I have something in mind for this, but haven't gotten around to implementing it yet. Full SSL is coming.
I have something in mind for this, but haven't gotten around to implementing it yet. Full SSL is coming.