>>I recently visited a web site that was not using SSL on the page used to enter and send credit card information. Now, correct me if I am wrong, but if (in IE5) the little security lock icon isn't visible while viewing a page, the page is not using SSL. I normally double click on this icon to view the site certificate before I enter my credit card info. Entering information in a normal form on a non-SSL page will send the information unencrypted, correct? Thanks!
>>
>>Paul
>
>One point to note here is that just because you see the security lock icon on the page where you enter your credit card details, doesn't mean that when you push the 'submit' button, your details will be sent securely. That depends on the address that is specified as the detaination for the submit. I have known sites that have the data entry page on an HTTPS://, but the action tag on the data entry form pointed to a normal HTTP:// page (hence no secure transmit of cc data).
>
>Although, I do beleive that once you are in HTTPS mode, IE 5 (maybe 4 also) will warn you when you are about to submit data to a non-HTTPS page.
Good point.
-Dave