SSL on tickets.opscode.com

Hi,

Correct me if I’m wrong, but is logging into tickets.opscode.com done in
clear?

From what I’ve briefly sniffed, the login is done in an ajaxy-way, with the
same protocol as what was used to load the page.

If I “force” the page page to be
https://tickets.opscode.com/secure/Dashboard.jspa, (un-logged), the content
widget don’t load and my username/password is rejected.

Is it like this only for me?

Benoit