The Hiawatha webserver website can now be visited via HTTPS. Via GoDaddy's free SSL certificate service for open source projects, I've obtained a free SSL certificate.
Update:
The certificate has been replaced with a 5-year certificate from Comodo, which has been donated by a Hiawatha user. Thanks a lot, Chris!
You can surely generate your own and use https://www.cacert.org/ - still free
Still congrats regardless. SSL is nice to have.
In case you want to change in future, StartSSL, which I've used for both a free and a paid certificate and been pleased with, offer free SSL certificates: http://www.startssl.com/?app=1