At this moment, if you go to http://completionator.com, there's no automatic redirect to https. If you login like this, your username and password are sent in clear text over the internet. If you go to https://completionator.com, you get an invalid SSL certificate (bad domain).

Will this be fixed in the future?

Yep, adding HTTPS support is on my list. I plan to switch hosts soon, so I've been holding out, but I'm not sure exactly when I'll be switching, so might need to just go ahead and do it.