I need to apply for a new passport, but my government's official website for submitting applications containing personally identifiable data does not use HTTPS — http://passport.gov.in/nri/Online.do
Normally, if a website is insecure and I don't need to use it, I simply won't use it or will find an alternative that is secure. In this case though, I'm at a loss — I need to apply for a new passport and I don't have an alternative because this is the government's only website. The form contains extremely sensitive & private information — pretty much my entire life history — and it would be a great loss if it were leaked.
How does one approach such a situation from a security perspective? Is petitioning my government to upgrade their security practices the only option?
P.S. Sending in a paper application is not an option, because the information needs to be sent to India somehow and the processing contractor will simply re-upload the data using the same insecure website. That is if they haven't rejected a paper application in the first place.