If you feel uncomfortable initiating a conversation but you like someone’s profile a lot then you can poke. If the poked feels like poking back then you had contact at least and you can start a conversation by telling why you liked the other persons profile.
2. A new message system that will provide pop ups apparently. I haven’t been able to test it yet.
That’s actually a concern that became bigger as the site grew more than I expected it would and so has HTTPS already a place on the to do list.
The logins won’t be intercepted on host-side by the way. The site is optimally secure and I am notified of any changed file on the server. But like you say it’s a concern and for me it is in the planning to implement before the end of this year.