Today after logging in, the site / forum prompted me to change my PW - "for security reasons." I guess it's required every so often (that's fine). Last time I changed it was almost exactly 1 yr ago.

But, the page it directed me to for changing PW, email, etc., is only http - NOT a secure HTTPS connection.
This concerns me a bit. Shouldn't the page where login data & personal info is entered be a secure connection?

Thanks.

 

The only personal data on that page is your forum password and email address.

 

Also, don't use a password you might use for online banking.