It seems, at least to me, that there really is no reason for any website to not be secure in 2017 2018 even, especially a forum with a login function.
Here are a few reasons I found to use https:
- It stops account hijacking by people who snoop on network traffic. (Roommate, Coffee shop...)
- It provides some privacy in that the contents of posts are hidden. (Mainly applicable for people in countries that restrict free speech.)
- It prevents ISPs or anyone else from tampering with the webpage and inserting ads.
- It removes a barrier for anyone who might have wanted to make an account, but their browser gave them a warning. (Yeah, I'm serious about this one.)
I don't mean to come across as harsh, but it feels like a bit of a disservice and a clear improvement to make. What do you all think?