I have heavy concerns when it comes to the login and password used both to get into the game and here on the website and the forums.
The login here on the web is not protected via https and so it is absolutely possible to intercept the data between my computer and the server. Usual practice in situations such as this is to encrypt the login via a secure https connection. Why is this not the case here and we are forced to login insecure, such spreding the login credentials potentially over the web?
With the estimated players that can be seen by the charts on Steam or Amazon the game will get very interesting for account stealers in no time, so in my opinion additionally security measures are in order...
I would really like to read a statement by a Cryptic representative about this. 'Thanks in advance.