it looks like the comments are in plaintext.

couldn't they be encrypted with the url?