forum security

I've just noticed that the site, including the forum and especially the login page, runs HTTP and no HTTPS connection appears to be available. Am I missing something or is this a big security hole?