non https registration pages

[Rowf]

Wasn't sure where to put this but why do some sites not encrypt registration pages?
I went to register a graphics tablet on the Wacom site and it doesn't use https.
If a site expects you enter personal details surely they should take steps to ensure that your personal information is protected.

Is there a way to use a secure connection for pages that don't provide their own?

 

[miles01110]

why do some sites not encrypt registration pages?

Because it's expensive and unreliable. The entire certificate authority system is a joke, anyways.

 

[Rowf]

Because it's expensive and unreliable. The entire certificate authority system is a joke, anyways.

Expensive it maybe but what's the point of making an account password when the initial entering of it on the page maybe accessible to anyone who has a passing interest?

Maybe I've read too many security articles but I'm pretty sure that most advice says not to enter personal information on unsecured pages.

 

[miles01110]

Expensive it maybe but what's the point of making an account password when the initial entering of it on the page maybe accessible to anyone who has a passing interest?

Because it's not accessible to "anyone with a passing interest." Intercepting internet traffic in a targeted way takes more than passing interest. A dedicated attacker isn't going to be stopped by an https website if they really want your information anyways.

Maybe I've read too many security articles but I'm pretty sure that most advice says not to enter personal information on unsecured pages.

If a page is unsecured you can either choose to sign up for the service or you can choose not to.

 

[Rowf]

If a page is unsecured you can either choose to sign up for the service or you can choose not to.

Can't argue with that.
Just a bit put out at the slack way that some companies handle customer info.
I'll make my choice.

 

[miles01110]

Just a bit put out at the slack way that some companies handle customer info.

It's pretty unfortunate. It's also not going to change until legislation forces them to, or until a major breach occurs that causes public outcry (see: Sony PS3).