2 ms·

This doesn't matter. If the connection is intercepted, the credit card inputs suddenly can be part of the form.

• AngryParsley 17y ago
  That's true for any non-https site. They could inject stuff into wellsfargo.com or whatever.