I was just about to enter my address etc into my profile, when I noticed that, although this is Admin only, the information is not sent via an encrypted link (the page is HTTP, not HTTPS). What is the security policy on personal info (bearing in mind that the forum requires enough detail for someone to steal your identity for other services), and shouldn’t it really be encrypted?
For me, failure to use HTTPS for personal info is a major fault with any system requiring personal info.
Jim.
.
