Actually the security program is correct. The AC board login is via simple http and can be "sniffed" over the network (aka man in the middle attacks). I have done it. Using an SSL certificate is a good way to protect yourself from those kinds of attacks. I'm sure everyone on the board would appreciate it.