Today we switched on HTTPS, so all our super duper secret modding activities can continue unfettered by nasty eavesdroppers.
SSL is a real pain in the ass to set up in multi-domain, multi-subdomain cluster environments and makes configurations more complicated, but in this day and age (and since google is about to mandate it) we had to make the switch.
I was almost gonna post a bug about that, I must have logged in during the conversion process, because Chrome was blowing all its bells and whistles telling me something is wrong with the security. Its all fine now, of course.
Great news Tom! There will probably still be lots of Mixed Content pages, but I assume you can always rewrite the http to // or https (for posted content and alike).
And I'm really looking forward to see GB implement HTTP/2 to serve the content faster and hope it gets even more secure for man-in-the-middle attacks where you could set the following http headers: Strict-Transport-Security, Content-Security-Policy, Public-Key-Pins, X-Frame-Options, X-XSS-Protection, X-Content-Type-Options Referrer-Policy!
In general, I'm quite glad GB finally made the switch!