...
Security and login, email privacy - There are significant flaws in arXiv's security and we are lucky that we have not been targeteddeficiencies which should be addressed. Issues include: all password entry and authenticated interactions should occur via https; domain based cookies should not be sent to mirror sites; and user email addresses should be more carefully protected.
...