Agreed! (but, in fairness, portal.aws.amazon.com might be an obsolete domain, since it just redirects to the correct aws.amazon.com... the actual console login

Agreed! (but, in fairness, portal.aws.amazon.com might be an obsolete domain, since it just redirects to the correct aws.amazon.com... the actual console login does use TLS 1.2 etc.) Even so, it still blows my mind that even the main Amazon.com main page uses no SSL at all by default, and they're an e-commerce site, unlike Google and FB. Seems to show a lack of respect for customer privacy.