Edit: it is over HTTPS but with a cert mismatch: https://www.ssllabs.com/ssltest/analyze.html?d=paulgraham.co...