the newest versions of popular browsers give an error if you try to submit a password over HTTP instead of HTTPS. As I have gotten complaints about this, I have switched the forum over to HTTPS.
Of course, this being SMF, a very poorly written code base -- which I am not an expert of -- has the base URL hardwired at all sorts of weird places instead of using a central variable for that.
Yesterday I caught the logo being loaded from HTTP and I just fixed smileys and avatars and three more settings via direct database.
If anything on the page is served over HTTP you will get a security warning when you submit anything. Please let me know if you see any such still.
Did I mention we need a system administrator?
Karoly Negyesi