Secure login

[derekslager]

The login form is currently unprotected -- should post to an SSL-protected login form. Similarly, users should not receive passwords via email after signing up (or ever).

[Carty]

yes - *very* poor security practice, especially emailing passwords in the clear. 'Beta' is no excuse, security should come first.

[Jacquilynne]

It's a food website - why does it need to be secure? There's no financial or personal information gathered.

[Chris VR]

Many people use the same login info for multiple sites. I think it's poor netiquette to send passwords in plaintext.

[AnneInMpls]

Plus, there's always the chance of a malicious person posting under someone else's name. I would hate to be the one who's kicked off of Chowhound because a spammer started posting offensive or junk material using my name and password.

Anne

[AnneInMpls]

Yup, what he said.

Anne