With the current server configuration, you would have to use Cloudflare and their universal HTTPS feature. There are plans to offer SSL directly on Free Hosting in the future, but that won't happen until (at least) the next major server reconfiguration (which is always disruptive and breaks people's code and stuff, so they try to minimize how often it happens).