Tbar, the Pond Boss forum runs over http vice https. To sum it up, when you enter your password on the forum the information is not encrypted as it sent over the wire to verify your identity. Generally not a good practice, however your account probably does not contain any sensitive data so there are worse things.