Websites without https

Neb

Neb

Neb

Associate
Joined
5 Dec 2004
Posts
254
Quick question....

If a website doesn't have the s on the end of the http when your buying something, is it pretty stupid to buy from them?


Thank you very much.
 
Not nessecarily. You only need the SSL part whilst entering details like card number, nothing else need be encrypted and hence the "s" part might only be there for 1 page of the whole site.
 
No, Im not 100% on the details but i believe there are new techniques used to ensure security without https.

For example when i enter my internet banking number on hsbc website it doesn't have https but i have no doubt it is secure.
 
In general yes, but if the payment is entered inside something like an applet or inline frame it is still secure.
 
eriedor said:
No, Im not 100% on the details but i believe there are new techniques used to ensure security without https.

For example when i enter my internet banking number on hsbc website it doesn't have https but i have no doubt it is secure.
Click to expand...
First 2 lines: No. HTTPS is the only way to encrypt communication between you and the server.

2. Internet banking number is ok to enter over hTTP, but not preferred.

ALWAYS enter card details over HTTPS. Guarantees the remote server identity - that's the main thing, rather than encrypting communication (unless you're on a shared LAN or wireless in which case I'd always use HTTPS)
 
Hmm maybe you are right but im sure i read something where someone complained to their bank as it's website didn't use https at login, the bank replied saying that it was infact secure despite the lack.

I'd hope my IB number is not transferred in plain text O_O !
 
You must log in or register to reply here.
Back
Top Bottom