The standard sign-up and login is done over a secure connection, to protect your information. (Apologies for the somewhat hokey certificate presently). If you don't have an SSL-capable browser, you can also login insecurely (or join for that matter). If you can do SSL, it's a better idea generally - but I shan't bore you with the details.