Warning on M&S site security

glyn_s

I don't know where else to post this so feel free to move it if you feel it necessary - it's a word of warning on the Marks & Spencer website -

I ordered some stuff a couple of days ago on their site and realised they had an old credit card of mine on their database - so I had to change it - without thinking about it I clicked on the update details link and input my new card details - it was only when I glanced at the address bar that I realised it wasn't secure (http rather than https, and no padlock) - by then my details had been sent so I had to block my card via my bank -

I contacted M&S and explained there was a problem with their site - maybe it's a glitch but something that needs addressing - I even sent them a screendump of the page (it was still in my browser's history which it wouldn't be if it was a secure page) -

So far they don't seem too bothered because I haven't heard back from them -

So, word of warning, watch out on M&S site - make sure it's secure

msianb

Looks fine to me - no padlock but it's got https: on the URL and if you select File, Properties it shows http with privacy and details of the encryption used. Probably nothing to worry about, but always best to be on the safe side.

wanna-b-rich

I've had this happen a couple of times when trying to check out. I contacted them about it and haven't had a reply.

D4WNO

Often the padlock icon will only show in the screen when you are actually paying and not beforehand, it's quite normal so wouldn't worry too much. As another user said also check out for the httpS in the address bar

Tryster

You also seem to see more and more of sites with a similar layout to this one.

It looks as if it's not secure as the top level page is not, but in fact various parts of the form are secure but are embedded in iFrames... Really bad design if you ask me, but people will employ any old code monkey these days!!