Originally posted by: ectophile
So far as I can tell, it does use https. However, it's all hidden - there doesn't appear to be a separate https login page.
As far as I can see I can login unsecured then click on 'My IET' button which takes me to a secured (https) page.
This is pretty much useless as anyone (on the network) could capture my unsecured login password and have full access to do havock on the forums (not that I'm entirely innocent on that score
) and view details about me and change things as they please.
The same can happen to anyone. Access needs to be made more secure.