Jump to content
  • entries
    77
  • comments
    854
  • views
    38,716

Buying something via an unsecure connection

nevets88

Entry posted by nevets88

1,647 views

 Share

I went to a site to buy some instructional content. I couldn't believe it when I didn't see https - that's the green padlock - that indicates encryption is being used. There is no way I'm buying your stuff over the internet if you're not using the https protocol.

Spoiler

Maybe I'm seeing it wrong or something is wrong with my computer - it's here, No https, right?

 

 Share

4 Comments

Recommended Comments

Club Rat

Club Rat 628

Posted

Usually a site will only use  the "https" when a person pays online, typically at checkout for security.

Many websites are still on a http address  such as gold digest as an example - http://www.golfdigest.com/story/here-is-the-2016-masters-tv-schedule-and-live-streaming-information
 

Quote

 

http://www.balancepointgolf.com

Placing an order

You may sign in as a guest or create a user name and password if you anticipate making future visits to our site.

When you are ready to check out, click on the Finish button at the bottom of the screen to enter payment information. After payment is completed you will receive two emails, one saying your order has been created and another that your order has been confirmed.

 

 

  • Moderator
nevets88

nevets88 2,432

Posted

  • Moderator
24 minutes ago, Club Rat said:

Usually a site will only use  the "https" when a person pays online, typically at checkout for security.

Many websites are still on a http address  such as gold digest as an example - http://www.golfdigest.com/story/here-is-the-2016-masters-tv-schedule-and-live-streaming-information
 

 

I understand pages where you're just reading text, not https, fine. The checkout page should be https, it isn't. I'm not going to input any personal information in the clear.

Maybe I'm not seeing something, but if people are sending their email and address over the clear, it's not the end of the world - when the payment is made, it'll probably switch to https, Paypal for example, but still, no https on the checkout page is just a big red flag in my view. I don't want my address and e-mail to be viewed by hackers. Buy an SSL cert - it's not going to break the bank and your customers will thank you.

Club Rat

Club Rat 628

Posted

3 minutes ago, nevets88 said:

I'm not going to input any personal information in the clear.

I agree it's not a good practice, but if your on your home router, the connection should be secure.

If you are interested in the stuff, you could contact Jim Waldron. I'm guessing the site is fairly old (created a few years back) and it probably has not been updated.

Imputing your name and info on the order page could be risky if your using a wifi hot spot, but once a person actually proceeds to check out, the page is generally re-directed to a secure page.

  • Moderator
nevets88

nevets88 2,432

Posted

  • Moderator

Yeah, I'll find another way. But even if you're not on wifi and at home, your info can be intercepted via man in the middle attacks.  I guess I could vpn it, but not going to.

Create an account or sign in to comment

You need to be a member in order to leave a comment

Create an account

Sign up for a new account in our community. It's easy!

Register a new account

Sign in

Already have an account? Sign in here.

Sign In Now


×
×
  • Create New...

Important Information

Welcome to TST! Signing up is free, and you'll see fewer ads and can talk with fellow golf enthusiasts! By using TST, you agree to our Terms of Use, our Privacy Policy, and our Guidelines.

  I accept
The popup will be closed in 10 seconds...