Hello !
had a bug two days ago : Good point, I'll add that to the todo list
Already planned :)
Sadly we can't for some technical reasons, But the wordpress blog doesn't have to have ssl for the connection to be secure, it's our api that has to have ssl for the connection to be secure, and we use ssl :)
That sounds great! About SSL, one issue I still see is that the posting key is exposed in the settings and can be stolen if a user logs in to his Wordpress blog (without SSL) and his session is hijacked. Maybe it would make sense to hide it after it has been entered?