[luv2code]

I checked and the strip communication is done ajax style through https. I don't see a problem.

[jamiebikies]

This is true. Also, you should be redirected to https when you go to /account if things are working how they're intended. I don't run the full thing through SSL quite yet, because I pull in content from lots of different sources (images, for example), and that would cause SSL warnings.

I have something in mind for this, but haven't gotten around to implementing it yet. Full SSL is coming.

[grosskur]

FYI, Camo might be useful for this:

https://github.com/atmos/camo

There's also a Go (golang) port:

https://github.com/cactus/go-camo

I'm currently using go-camo in my own feed reader and have experienced some flakiness (images fail to load sometimes).

(Also, nice work!)