Personally, I think that's a web UI design flaw where the page loads non https but a credit-card form has a POST as https. Also, I'm kinda concerned that vice-v

Personally, I think that's a web UI design flaw where the page loads non https but a credit-card form has a POST as https. Also, I'm kinda concerned that vice-versa could happen. I wish browsers had a feature to detect what appears to be a form asking for sensitive info and let me know if the POST will happen over https or not. Basically, stop me from proceeding anytime a form is about to submit containing a field of 16 digits with some kind of modal warning dialog.