Secure sites?

by 5 replies
6
I've had more than one situation recently where a site has legitamately requested my social security number, but I'm not seeing a little lock at the bottom of my browser, nor does the URL begin with https://. When I've asked, they assure me the site has bank-level security.

I want to believe them, but I had a friend who's identity was stolen and I saw the hell she went through. I'm very careful about stuff like this. Are there ways other than what I've described to be sure a site is secure?

--Kim
#programming #secure #sites
  • If they're not running under SSL (the 's' in https) the site isn't secure, and anyone with a modicum of talent can read any data you put in a form and submit.

    There are VERY FEW entities with a legitimate reason for needing your SSN, the majority of which are either government or financial institutions. Think more than twice before giving that out, and NEVER do it over a connection that isn't https://!!
    • Banned
      [DELETED]
      • [1] reply
  • OK. don't worry, it's not an online business, and I wouldn't necessarily expect them to know everything about building a website. They just do some communications that way, just as every offline business does by now. Thanks for your help.
  • Yes, Kim - the 's' is the only way to ensure that the site is secure. Data is encrypted in the browser before it's sent into the internets, and only the site with the proper certificate can decode it. Whoever is telling you this is 'bank-level security' is yanking your chain.

    Any offline business that asks for private information over an insecure connection should be educated that what they are doing is VERY dangerous. Further, if they are asking for your information in this way, are they also storing it in an insecure fashion?

    If they need your SSN for a tax form or something, you should print it, fill it out, and mail it.
  • Yeah, always make sure that a site is ssl securec (lock at the bottom) and if you have firefox there are additional add-ons like WOT to help you.
Join the discussion

Next Topics on Trending Feed

  • 6

    Secure sites?

    I've had more than one situation recently where a site has legitamately requested my social security number, but I'm not seeing a little lock at the bottom of my browser, nor does the URL begin with https://. When I've asked, they assure me the site has bank-level security. I want to believe them, but I had a friend who's identity was stolen and I saw the hell she went through. I'm very careful about stuff like this. Are there ways other than what I've described to be sure a site is secure?