Having your autotrade trading permissions altered by someone else could lead to serious financial loss. With HTTP everything is sent in the clear including your C2 username/password. Not all of C2 needs to be encrypted but certainly anything to do with money (managing subscriptions & trading permissions) should be.
Thoughts/Comments?
Yes. There is a new version of the Permissions page being developed (release scheduled soon) which uses https.