I only just noticed that the registration page where the password and security question/answer are initially set isn't even https. Even if the input is sanitize

I only just noticed that the registration page where the password and security question/answer are initially set isn't even https. Even if the input is sanitized on the server side, that's another huge invitation for an attack.