SSL Encryption Suggestion
It's relatively inexpensive ($100-$200) to get a basic SSL certification from a real certification authority such as godaddy, and I note with interest when you login to this site it does not require/force SSL encryption. I would highly suggest using this method for both the regular website and the chat. The reasons are quite obvious but if I need to provide more information as to why, I'll be more than happy too.
I guess thats a go fuck myself answer.... lol