Marks and Spencer - secure site?

  georgemac © 13:39 23 Mar 05
Locked

click here and click buy online - this is the M & S site for ordering travel money. If you go through the process - then continue - you will see the page you enter your card details on does not appear to be secure.

I have just completed a transaction, buying US traveller cheques on the Marks & Spencer website. I saw the Verisign secured sign, but just as I clicked the proceed button, noticed that I was on an http:// page, not an https:// page I would normally expect to see on a secured website. Also the IE bar which would normally display the locked padlock seems to be obscured by the advert scrolling across the bottom of the page. I never noticed until I had completed the transaction (complete trust in M & S- and accesed from main site) I saw the Verisign secured sign, but just as I clicked the proceed button, noticed that I was on an http:// page, not an https:// page I would normally expect to see on a secured website. Also the IE bar which would normally display the locked padlock seems to be obscured by the advert scrolling across the bottom of the page.


I have called M & S money by telephone, and have been assured all my details and my transaction is safe, but I have also emailed them to confirm that the webpage I entered my card details on are secure click here

Any views? I always thought we should look for the padlock and https://

  pauldonovan 13:47 23 Mar 05

...it explains all.

If you right-click on that page and pick properties, you see it is SSL ("HyperText Transfer Protocol with Privacy") and also "SSL 3.0, RC4 with 128 bit encryption (High); RSA with 1024 bit exchange".

It's secure.

  georgemac © 18:05 23 Mar 05

Yes, they have replied the same - it is secure - but why no https:// and why obscure the locked padlock with a banner ad when it is drummed into us to make sure we are on https:// and check the locked padlock?

I had the same on an argos website.

  pauldonovan 18:39 23 Mar 05

... to do with the structure of the page, whereby the secure bit is actually 'embedded' in a frame in the middle so the whole site isn't secure.

I think it is a bad choice of design for the reasons you say and will put savvy customers off.

  Forum Editor 01:16 24 Mar 05

there's a very prominent Verisign seal, and as pauldonovan says, the site security link explains everything quite clearly - the transaction takes place on a secure server.

  georgemac © 06:43 24 Mar 05

I saw the verisign seal - but have always been led to believe that you should never input sensitve info unless you see the locked padlock and https:// showing you are on a secure site. This is the problem - I carried out the tranaction, and will do so again as I am now 100% happy the site is secure, but to simple web users like me who do not know anything about web design, I find this confusing.

I have seen plenty of spoof ebay/paypal sites that look genuine so how hard would it be to spoof the verisign seal? I have not got a clue.

Are you saying any site that has the verisign seal is gauranteed 100% secure?

  georgemac © 06:52 24 Mar 05

click here how to tell if a site is secure click here the oft even tells us to make sure the padlock is there click here top tips section also tells us to look for this

everywhere I look I am told to look for https:// and the locked padlock - so why when this is what consumers are being told, do some firms not comply with this system?

  georgemac © 10:19 24 Mar 05

very highly - ordered just after lunchtime yeterday and delivery of travellers cheques by 9.30 this morning by special delivery

all free, no commission and paid for on my M & S card with no charges. Brilliant service.

This thread is now locked and can not be replied to.

Amazon Fire HD 8 review: A brilliant combination of function and value – with one massive caveat

1995-2015: How technology has changed the world in 20 years

How to create an introvert-friendly workplace

Apple Watch 2 review | Apple Watch Series 2 review: New Apple Watch is faster, brighter, water-resit…