I posted this in another thread, but really, this needed a thread of its own.

WHY is the SSL (https) not the DEFAULT log-in? Having to click to "Secure Log-In" shows security is not taken as seriously as it should be. The real question is not just why isn't SSL the default --- but why have an INSECURE (http) option AT ALL??