It kind of feels wrong that we display https pages (which might then claim that everything is secure on this page if you visit it using https) without any warning or a way to disable them at all. For users who are not aware of our complete lack of certificate handling this is a potential security threat. I'd recommend to add a option to explicitly enable https without warnings and otherwise give out a confirmation dialog whenever you visit a https page.
It kind of feels wrong that we display https pages (which might then claim that everything is secure on this page if you visit it using https) without any warning or a way to disable them at all. For users who are not aware of our complete lack of certificate handling this is a potential security threat. I'd recommend to add a option to explicitly enable https without warnings and otherwise give out a confirmation dialog whenever you visit a https page.