Signal Entry API : HTTPs URL

The Signal Entry API page does not mention a HTTPs URL for transmitting the password of the trading system.

Is it as simple as:

It get a shiver down my back every time I use non-https URLs when a password is involved in the transaction!