The forum used to have a valid https certificate (about 6-8 months ago maybe?), though by default the forum opens as http. You'd have to manually switch to https.
I can bring it up with the site owner, in this day and age there's no reason for a website to be wide open since it does contain passwords and email addresses.
__________________ Camille
Completely orchid obsessed and loving every minute of it....