back to article Scarborough Building Society pulls insecure 'print' form

Scarborough Building Society has pulled an insecure form from its site after it emerged that sensitive information was sent over an unencrypted connection. An online application form for various types of savings accounts invited prospective investors to fill in various categories of sensitive personal information before …

COMMENTS

This topic is closed for new posts.
  1. Ian
    Stop

    "We have experienced a technical issue"

    It's not a technical issue, it's incompetence.

  2. Anonymous Coward
    Thumb Down

    AJAX?

    I bet it was an AJAX based form, and I bet it was created using some mickeysoft (s)tool.

    I mean, come on... to resolve it you don't need to remove the whole form, you need to either: make it send it's requests to a secure server; or remove the validation system for now (replacing with javascript if appropriate as time allows).

    Oh well, another one bites the dust!

This topic is closed for new posts.

Other stories you might like