These types of services really need to consider delivery over HTTPS, especially now that Facebook requires it for the app canvas and for added security over mobile WANs.