in case anyone else is wondering, musewhale on bitsharestalk.org gives an anwser.
which is quoted below with link to page.

wallet.muse.help
The security of the web wallet is not affected by HTTP, because the signature of the private key is done on the local computer
However, HTTPS is applying for it and will be available next week +5% +5% +5%