Ask PG: Make the login form available over HTTPS only?

Hi PG, I noticed news.ycombinator.com supports both SSL and vanilla HTTP. While savvy users probably have been doing this for years, the login form as well as the comment submission pages are available over vanilla HTTP. This means that if I try to log in on a wireless connection and forget to use the SSL link, anyone can sniff my HN username and password by reading the packets sent between my computer and the wireless router. Passing login credentials over HTTPS is a standard industry best practice (passing auth cookies over HTTPS as well is best, as Firesheep demonstrated).

Could you please make the login page available only over SSL? Then I wouldn't have to remember to use the secure link when logging in. Of course all non-logged in visits could continue to use HTTP.

Best, Kevin