I bought an SSL certificate that has been installed. I've set it up so that https://itrebal.com will give you the same content as http://tools.itrebal.com - I realize that this is unconventional, but I figured I'd set it up so you don't have to send as many passwords over clear-text.
Graham