5 ms·

I don't trust a site that stores my CC information in a cookie to always serve HTTPS pages. Also you didn't address the most important point, PCI compliance.

I don't trust a site that stores my CC information in a cookie to always serve HTTPS pages. Also you didn't address the most important point, PCI compliance. The method Santander employs is unquestionably a bad way to do things.

snikch 14y ago
If the cooke is set to secure it won't be sent in a non https request.