zenmonkeyII wrote:As has been mentioned password recovery does not send out the email - it is likely a configuration option on the email function.
Yeah, email from the forum appears to be broken still. We'll figure it out. I'm guessing that whatever SMTP server we used doesn't like the new setup.
Update: Our SMTP configuration hasn't changed. The forum is
trying to send emails, but they're not making it through. To fix this, we'll probably have to pay somebody with an SMTP server to send them on our behalf. AWS SES can do this, I think.
zenmonkeyII wrote:Also note that the logon is not secured - password and email seem to be sent over an unsecured regular http connection.
Yes, we've never paid for or configured an HTTPS certificate for the site. I'd like to fix that, but actually getting it to work is going to require some more effort on the back end. Probably we'll go with LetsEncrypt and some kind of automatic renewal system, because that's free. Or maybe the new AWS cert system, if it's automatic enough.
Are you the same zenmonkey as usual? Did you have trouble recovering access to your old account for some reason? If so, I believe I have your email address somewhere and I'm happy to work with you to confirm your identity and fix this.