The website doesn't use https when users log in. It somewhat removes the benefit of forcing strong passwords if they'll just be sent unencrypted.

(I was able to use https://fold.it/ by typing it into the address bar, and clicking links keeps me in https, but once I submit a form it usually switches me back to http)

Makes me wonder: does the game itself use secure connections?

UncleMion