3 ms·
Looks cool! Simple to say the least, which is not easy to do! But I'm worried about something. The credit card input on the payment page shows a lock even thou
by conradk 12y ago
Looks cool! Simple to say the least, which is not easy to do!
But I'm worried about something. The credit card input on the payment page shows a lock even though the form is NOT submitted over HTTPS... that makes it look like you're blatantly lying to your customers. Am I missing something?
EDIT: I was missing something. While the HN post links to the HTTPS version, I somehow ended up on a non HTTPS version of the site at some point. Which seems to allow sending CC information over a non encrypted form.
- dmerfield 12y agoAh shoot, good catch. That page shouldn't be accessible over HTTP. Will push a fix to force a redirect to HTTPS.