In understand the key is not transfered to the server, but I would still love to see SSL. I also wouldn't want any external resources on the page. No Statcounters or Analytics. Good direction though, appreciate the effort!