3 ms·
As a low tech experiment, I just grabbed the list that started this thread and tried a few random sites. I only made it to the third one before I found an http
by technion 10y ago
As a low tech experiment, I just grabbed the list that started this thread and tried a few random sites.
I only made it to the third one before I found an http:// http:// checkout page. I tried to change the address to https:// https:// and found it complaining about a cert mismatch. I also viewed source and confirmed the form submits to an http:// http:// address.
So.... yes.
- Silhouette 10y agoThat is genuinely disturbing! Do some payment services not do at least a basic check of integrations before allowing them to go live? I haven't worked on a site starting out with online payments very recently, but the last time I did, there was a short series of entries in the server logs that did look like someone from the payment service had taken at least a very quick look at the relevant pages.