On-line ordering security question!

[Sooz]

First, let me catch you up on my post last month about my connection dropping out. It was my server!  Thanks for helping me troubleshoot!

My NEW problem is that I went to macwarehouse and to another site today, both of which I have ordered things before, on-line.  I did my shopping, and proceeded to checkout.

Both sites then had a pop-up warning about info in transit can be observed by a third party, and did I want to cancel my order.  Well, I looked down at the little locked icon, read the popup again, and decided to not gamble.  I'll be calling those two places to place my order.  

Went to a third place, and ordered without a problem, no pop up warnings or anything.  

What gives?  This has not happened before when I ordered from the two sites...is this something new? Better cybercriminal hackers?  

Thanks!  

Smiles,
Sooz

[Diana]

Hi Sooz,

It may be that the sites you've had no problem with before just redid their site layout. Some sites will encrypt all data from the time you begin a buying process. Some sites will only encrypt once you get to the point of putting in crucial data like credit card info. Maybe, (you'll have to judge since I haven't bought there), the data that was being sent when you got the popup wasn't yet really private, but your browser warned you anyway. It's good to be somewhat paranoid, but if you had only put in your order short of credit card info, then go ahead and proceed. Make sure though that the rest of the info is "locked" after that though. Don't put any credit card data in if the key/lock isn't closed.  Some shopping carts are set up this way to lighten server load since it takes more processor power to run behind the SSL connection..the one that encrypts. Less time spent running through the SSL connection makes things easier on the server.

If the lock never closes, then for sure don't finish the process. Never send your credit card info through e-mail to anyone. If the site seems "wrong" somehow, then be suspicious that it's a fake/copy of the real one. It's harder to actually hijack real domains now than it used to be, but if there is anything unusual in the domain name from what you expect, be careful. paypal.com is NOT the same as paypa1.com. Note: some fonts show the number one and a lowercase L to be similar if not exactly the same.

Use your eyes...get familiar with Internet tools like Whois and make sure you don't just believe everything you see or read...even that from friends or known organizations.

*grin...I seem to be posting all warning messages lately. I truly am a bit paranoid myself.

 

[krissel]

Diana mentions the most probable reason but there are two other possibilities I can imagine.

Check your security prefs in your browser to see what level is selected. If you have a high rating chosen or you have the request for warning noticies you may see those warnings even when the info you are submitting isn't all that private.

Also, you may have hit upon sites where the security certificate in your browser has expired. If you haven't upgraded your browser recently this is entirely possible.

[Sooz]

Thanks, Diana and Krissel!

Smiles,
Sooz