5 ms·
Oh dear - no HTTPS on that page. But, it does host a store section that lets you add stuff to your cart and then click a checkout button. That button takes you
by dagenix 8y ago
Oh dear - no HTTPS on that page. But, it does host a store section that lets you add stuff to your cart and then click a checkout button. That button takes you to PayPal (unless an attacker re-directed you elsewhere). Its not clear to me that there would be any real way to verify that what you are paying for the stuff from that website - it seems relatively straightforward for an attacker to modify the PayPal link to send you to pay for stuff on their store.
Basically, this seems like a pretty irresponsible way to run a web store.
- slenk 8y agoI e-mailed the support email about it. I got a response back - I think I convinced them to do it: "Thank you. You are correct, I will go to godaddy and get one :) it is fashion. Regards Chin" Or he is telling me to get lost.
- geezerjay 8y agoIt seems a full day has passed since you've posted the message. I've just checked the store and it's still served through a plain old unsecure HTTP connection. It seems you were told to get lost.