hmmm I just noticed....
ltcgear doesn't force https at anytime unless you type
https://ltcgear.com and then you are good?
If people are not using https while logged on to their ltcgear account then their account would be open to be hacked...?
Any http traffic from your account can be viewed, intercepted and possibly changed?