It's been like this forever - no security certificate for login page. I don't use my UN / PW for here, on any other site, though some foolishly still do. However, kiddies could intercept anyone's PW, then impersonate them & cause lots of trouble or a ban for the real user.
We all know the web has gotten to where hackers often do malicious things for the fun? - some compromised sites or users UN & PW may have no monetary value on some sites. Little old grannies & grandpas may still not understand the risk in re-using PWs at other sites.
How much would a certificate cost per yr? What if the users with over 828 posts all chipped in - what would each have to pay. I'd guess very little.
Several other sites that I or others mentioned this to operators did eventually get valid certificates.
