> A game absolutely should be use HTTPS anyhow, for their own security. The game has no log-in or sign-up; no account system. The only potentially sensitive da

> A game absolutely should be use HTTPS anyhow, for their own security. The game has no log-in or sign-up; no account system. The only potentially sensitive data sent is the nickname the user enters. > But I'd say that anyone that has an operation so big that it dynamically creates and destroys servers to balance load should probably already be paying for their own wildcard cert anyhow. The game is free and ad-supported. Dynamically creating and destroying servers is a basic requirement.