I'd recommend using some form of HTTPS, such as SSL, as hosting a forum over HTTP makes all users vulnerable to man-in-the-middle attacks, which is really not good for the security of the site itself, as this allows malicious people to get access to accounts just through packet sniffing. Sure, VPNs ...