"Sign In" page is not protected with SSL
User credentials are being transfered in clear text. It may lead to leaking of sensitive information and therefore potentially to an unauthorized access to this site.
(from redmine: issue id 36, created on 2009-05-21, closed on 2011-11-22)