Are the passwords here at risk? Were they previously? Or is this only for secure web sites?
It’s only for secure web sites. Freerepublic runs on port 80, so there’s no listener on port 443, which is the https port.