Security starts here!

Ok one thing I noticed with our logins is that they are not over a secured connection. It's just the standard http:// and not https:// I don't know if this belongs inside here or forum suggestions but it's a bit concerning to know our logins are sent in cleartext and not over a secured connection.

Eh, moved to Suggestions.

Basically nobody uses https for forum logins. The Truecrypt forum does and one other security only forum that I remember seeing, but that's all I've seen. I thought about bringing it up too, but, realistically, it's a cost the admin's have to foot and the benefit is realistically minimal. You shouldn't be using the same password here as you do on important (ie, financial) sites and if your password gets compromised, all the attacker has is access to your account. He can deface it, but even if he locks you out you can reset your password via e-mail and get back in to fix it as soon as you notice. And you don't (I hope) store personal information on the forums.

It'd be nice, no question, but DS won't exactly break without it.

I guess it's something to ponder, and even with self-signed certificates for actual SSL/TLS, or challenge/response stuff for rudimentary protection would be better than plaintext logins being sent. Good idea...

Encrypted wifi, man. You should already have that, being a computer geek. Because this doesn't matter too much.

Assuming you're coming from home. And assuming that your router has WPA, and that your OS supports WPA (WEP is a 5 minute inconvenience).

Plus, that would only encrypt the data from your computer to the router, and it would then be plaintext to and from Dev Shed's servers, including ISP networks and things that it takes to do that.

TCPDUMP or WINDUMP will tell you all you need to know

The thing is I log into a lot of public networks such as school or hte public library.

Truth is I'm not overly scared of someone logging into this account... not unless they know what other sites I frequent under what usernames, and even then, they'll only get half of the not really important ones.

I mean, if someone was to log into my account and change my info, I think I'm well known enough to get the account back with the help of some friendly staff... minor inconvenience at most.

Though if it does get implemented I'd give kudos.

So I guess in the end I'm neutral due to not caring too much.

Who are you exactly?

On a more serious note, I think that if you are that concerned about the security of your information, you wouldn't be using a public network. Same concept goes for sex, if you are that worried about it, either abstain or use protection (like SSL).