In the UK our postal service drops cards through our mailbox when there is a fee to pay on a item of mail. On this card it gives us a URL to visit to pay the fee, after following the links you get to this site:
http://www.royalmail.com/portal/rm/esurcharge
In the top right corner of the page it says "This page is secure", in fact this link goes to a FAQ which includes the following text:
All details are taken over a secure network and held in compliance with all required UK security and data protection standards. To help keep your details secure, please do not share your password with anyone.
Am I missing something:
- The site doesn't use HTTPS (SSL).
- Adding the "s" after http re-directs back to the non-SSL site.
- There appears to be nothing in either FireFox or IE that indicates it has even made an attempt to use SSL.
- Starting from royalmail.com and working my way through I still get a non-SSL site.
I don't intend to put my credit card details in there, however I am slightly at a loss as why such a large company would mess up in this way. I can't quite believe it, could this be something else?
EDIT: You can register on the site (which is secure), and enter credit/debit card details which is also secure. However on most of the secure pages the "This page is secure" link is missing... go figure.