It seems this site allows for regular 'http' instead of 'https' in general.
because even a moment ago playing with some stuff I noticed I was using the general http for general posting on here and you can click your current topic and at the beginning add in "https://" (without the ") and it uses a secure connection, pretty much. well it says 'parts of this page are not secure (such as images)' which is a bit better than none of it being secure etc.
it's a wonder the site just don't force the https option automatically... like if someone tries to access "http://IMDB2.freeforums.net/" (which takes you to the un-secure version of this site) it should automatically redirect to "https://IMDB2.freeforums.net/" instead. EDIT: even after playing with it, the site seems to default to non-secure connections when browsing the random sections here.
either way, this site is not a high sensitivity site anyways so I would not worry about it too much. because even if your account got taken over it would not be a the end of the world unless your using the same password on higher sensitivity sites which you should not be doing as everyone should be using a password manager so it can automatically generate a very secure password to each site you login to (i.e. each site has a different/secure password) so if one site became compromised it could not be used against you to hack into other sites you might use etc. but I suspect many people still continue to use crap passwords and not only that but use that same one across many sites which is very unwise. or look at it this way... one account that would upset many if it got hijacked is their Google account since their email is likely used for banking and other potential higher sensitivity stuff which is why stuff like YubiKey (i.e. www.yubico.com/ (works on Google/Facebook and some other sites)), which costs a little $, is worth it for peace of mind knowing someone can't hijack your google account even if they got a hold of your username/password (this is the most secure 2 factor authentication method right now (Google employee's use similar stuff basically to no one can Phish Google employees to take over their account for shady reasons etc) where as using ones smart phone etc can potentially be bypassed). I ordered the basic one and I got two of them to use one in general and one as a backup in case one is lost or fails otherwise it could be a chore to get back into your account.
Know God, Know Peace. No God, No Peace. | "To one who has faith, no explanation is necessary. To one without faith, no explanation is possible." - St. Thomas Aquinas (1224/1225-1274) | "If you don’t behave as you believe, you will end by believing as you behave." - Fulton J Sheen (1895-1979) | "He who prays is saved. He who prays not is damned!" - St. Alphonsus Liguori (1696-1787) | pray The Holy Rosary daily!