Please use config.html with https

[Charly86]

it would be great that config.html redirect to same url but with https to avoid clear text password of your particle account sent over the internet !!!

Using https://rawgit.com/digistump/OakSoftAP/master/config.html
instead of
http://rawgit.com/digistump/OakSoftAP/master/config.html

[darklotus]

I might be wrong but if you load it via HTTPS i believe most browsers will then not let the page make a request to the Oak via HTTP, so it isnt quite that simple.

[digistump]

Your password for particle is sent via https - all communications from the config app to particle is over https. The page is served via http because as @darklotus states, otherwise your browser would not allow it to contact the Oak for configuration.