I was wondering if you were planning on adding SSL to the website, at least for the login, but hopefully for it all.
That would be great since I know you have nothing better to do. :)
Yes, this is possible, i'll look into it tomorrow. May be i can also add option to lock bitcoin address or reqire e-mail confirmation for changing it.
By the way, if THEY are sniffing or MITMing your connection, how are you going to get correct SSL certs for my site ?