Re: Credit Card Security Not Visible

2011-10-08 Thread Dan

At 5:36 PM -0700 10/6/2011, Al Poulin wrote:

Is there technology whereby vendors provide security on credit card
checkout transactions with no https or padlock appearing on the
browser window, whether Safari or Firefox?


Yea.  The initial page(s) are unencrypted, but the form's POST 
operation is done via SSL (https).


They do this because driving a whole session via SSL is a much 
heavier load on their servers.


IMO, it's not a very good way to do things, as the initial pages can 
be spoofed and the user will never know it. :\


Just... use common sense.  NEVER click on any link in any email 
unless you *KNOW* the email is legit.  And before clicking, *always* 
take note of the actual URL, in the tooltip, to make sure it's 
sending you to the legit site.  When in doubt, use your browser 
bookmarks to get to the site...


- Dan.
--
- Psychoceramic Emeritus; South Jersey, USA, Earth.

--
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Credit Card Security Not Visible

2011-10-07 Thread Al Poulin
On Oct 6, 9:23 pm, Beverly Woods macli...@beverlywoods.net wrote:

 Al, I went to the site you mentioned, and like many other websites, the
 security stuff comes in when you go towards the checkout.

 So although you enter at

 http://www.tracfone.com/

 when you put in your shipping and billing info and make your purchase
 you are in a secure zone:

 https://www.tracfone-orders.com/blahblah/

Thank you Beverly.  Indeed, I now trust the web site.  While messing
around in Safari Show All History, I found several lines with https,
although I did not see that security indicator in real time.  It
appears that security kicks in when the URL includes direct/
controller.block.   So I made my transaction.

Then, in a second round of email where I mentioned specific absence of
https and padlock, the response included this: TracFone Wireless
assures our customer that we have secure transactions online.

Al Poulin

-- 
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Credit Card Security Not Visible

2011-10-06 Thread Al Poulin
Is there technology whereby vendors provide security on credit card
checkout transactions with no https or padlock appearing on the
browser window, whether Safari or Firefox?  Would they be negotiating
digital certificates behind the scenes with no visible evidence of
that?

Example is cell phone vendor TracFone.
http://www.tracfone.com/

In answer to my query about their policy, TracFone claims they go to
great lengths to implement technology and security features to
safeguard the privacy of your customer identifiable information from
unauthorized access or improper use….

Al Poulin

-- 
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Credit Card Security Not Visible

2011-10-06 Thread Joshua Juran

On Oct 6, 2011, at 5:36 PM, Al Poulin wrote:


Is there technology whereby vendors provide security on credit card
checkout transactions with no https or padlock appearing on the
browser window, whether Safari or Firefox?  Would they be negotiating
digital certificates behind the scenes with no visible evidence of
that?

Example is cell phone vendor TracFone.
http://www.tracfone.com/

In answer to my query about their policy, TracFone claims they go to
great lengths to implement technology and security features to
safeguard the privacy of your customer identifiable information from
unauthorized access or improper use….



I don't know about that, but they sure went to great lengths to avoid  
answering your question.


I strongly recommend not submitting sensitive information over  
insecure HTTP, and avoiding doing business with those who require or  
expect you to do so.


Josh


--
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist


Re: Credit Card Security Not Visible

2011-10-06 Thread Beverly Woods



On Oct 6, 2011, at 5:36 PM, Al Poulin wrote:


Is there technology whereby vendors provide security on credit card
checkout transactions with no https or padlock appearing on the
browser window, whether Safari or Firefox? Would they be negotiating
digital certificates behind the scenes with no visible evidence of
that?

Example is cell phone vendor TracFone.
http://www.tracfone.com/

In answer to my query about their policy, TracFone claims they go to
great lengths to implement technology and security features to
safeguard the privacy of your customer identifiable information from
unauthorized access or improper use….


Al, I went to the site you mentioned, and like many other websites, the 
security stuff comes in when you go towards the checkout.


So although you enter at

http://www.tracfone.com/

when you put in your shipping and billing info and make your purchase 
you are in a secure zone:


https://www.tracfone-orders.com/blahblah/

HTH,

Beverly

--
You received this message because you are a member of the iMac Group, a group 
for those using Apple iMacs and eMacs.
The list FAQ is at http://lowendmac.com/imac/list.shtml and our netiquette 
guide is at http://www.lowendmac.com/lists/netiquette.shtml
To post to this group, send email to imaclist@googlegroups.com
To leave this group, send email to imaclist+unsubscr...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/imaclist