I've been meaning to do it for a while (years), apologies for the delay.
All connections to the website are now redirected to SSL. The certificate is courtesy of letsencrypt so poke me if I forget to renew it by the end of February.
Looks like we get an A+ rating from ssllabs, so that's good.