I only use the Guest Account on the webinterface even when I use my proxy, never the Admin....... so if somebody is "sniffing" my password, he/she can only look at my aquarium status, not change anything.
Just give us SSL on the Profilux, just like the webserver from my UPS. But i don't think that this is a great priority at GHL.
The have so many things to build and so little time............