You'd think a service revolving around privacy (i.e. anonymity) would go to greater lengths to use SSL across the entire site. Otherwise, fantastic idea. Can't say I haven't bounced the idea around of the "groupthink" need lately.
I disagree. SSL is always nice, but end-to-end encryption isn't magic. SSL protects you from targeted man in the middle attacks by governments, isps, and users on the same network. Your friends are neither.