Traffic between user and straightforward is not encrypted (missing HTTPS)

Hi @berstend 

Very cool library. The problem that I see is that the traffic between the user and straightforward goes travels through HTTP so it's not encrypted.

Ideally you would be able to add unofficial certificates to encrypt the traffic.

Have you thought about this? What other easy alternatives are out there?