Florida HOA BOD meeting minutes

I can help with the first part of the question.

The insecure manner has to do with how the userid and password are sent over the internet. The simplest analogy is to think of the difference between using your regular phone line to call a friend and talk and the military using a scrambled/coded telephone line to talk on (like you see in the movies).

The regular phone line allows anyone who might have a tool to hook up another regular phone (like the phone repair man) and tap the line and hear all your conversation clearly.

The scrambled/coded phone requires a special phone at each end that take what you say and scrambles it with some type of electronic device that codes and then decodes the signal on a phone line. If the phone repair man taps that line with his regular phone he will just hear gibberish.

The same works for websites. You can have an unsecured connection and when you type in the userid and password it will be transmitted without being scrambled and anyone who has the appropriate scanning tools can figure out what you sent, thus find out your userid and password. This does take a bit of work and some expertise and a desire to want to know the information. There are some news stories of hackers getting credit card numbers this way.

However, if the website is created to use an encrypted Internet connection, then the amount of work to see your userid/password is increased significantly, almost to the point of impossible for all but the really sophisticated.

There are variations in between to give different levels of security, however, the more secure, generally the more the cost for the website developer. As an end user of a website, you really don't have much choice. However some web browsers will warn you so you can decide how much risk you want to take.

All of this security has absolutely nothing to do with your HOA documents or other legal issues. It is purely one for a technical development effort.

Personally I like to see a more secure website connection when I send userids and passwords. But I also don't get too excited when I send a userid/password to something that has a low risk of damage to me if it is compromised.

Long answer, but does it help any?