TLS clients will bork if they connect to a host that does not offer a certificate. Typing your username/password on a page that is not secure deserves you to get your account hacked. Nuff said.
4/ Don't blame the N900. 5/ Stupid topic 6/ ??? 7/ Profit.