The Live Game Room now works with the https server, only the http requests are adapted, the Game Room still uses a regular tcp socket to connect to the game server, and that traffic is not protected.
When the next version of my iOS app is approved, I will flip a switch and make pente.org https-only, which is safer for everyone.
The latest version of the iPhone app does HSTS now which means no more connections over regular http, it's all https now.
If you haven't done already, please update the app because I am considering to make the server forward http requests to https, so that pente.org is https-only.