4 ms·
Monzo [1], Starling [2], Atom [3] and Tandem [4] all manage to have HTTPS landing pages. If they can, there isn't any excuse for the more established banks not
by arthurfm 9y ago
Monzo [1], Starling [2], Atom [3] and Tandem [4] all manage to have HTTPS landing pages. If they can, there isn't any excuse for the more established banks not to as well. Hopefully their mobile apps use HTTPS for everything too?
Apparently 35% of all UK banks have insecure landing pages. [5][6]
[1] https://monzo.com https://monzo.com
[2] https://www.starlingbank.com https://www.starlingbank.com
[3] https://www.atombank.co.uk https://www.atombank.co.uk
[4] https://www.tandem.co.uk https://www.tandem.co.uk
[5] http://blog.softwareverify.com/list-of-uk-banks-that-are-secure-by-default/ http://blog.softwareverify.com/list-of-uk-banks-that-are-sec...
[6] https://twitter.com/softwareverify/status/940961044633149440 https://twitter.com/softwareverify/status/940961044633149440
- ZoFreX 9y ago> Hopefully their mobile apps use HTTPS for everything too? Well, HSBC's didn't: https://threatpost.com/banking-apps-found-vulnerable-to-mitm-attacks/129105/ https://threatpost.com/banking-apps-found-vulnerable-to-mitm...