Looks like more head-in-the-sand security from people who aren't detail oriented. Yes, your login pages need SSL. Perceived rarity has nothing to do with it! A

Looks like more head-in-the-sand security from people who aren't detail oriented. Yes, your login pages need SSL. Perceived rarity has nothing to do with it! A password is being transmitted in plaintext. If forum passwords weren't a target then why are so many website databases a primary target lately? They steal the crappy, unsalted hashes and emails and go to town at other services where they are likely to use the same password. I can't believe we are having this discussion!