if you don't get it, you don't get it
Aug. 28th, 2000 05:53 pm![[personal profile]](https://www.dreamwidth.org/img/silk/identity/user.png){kind=small}
geekchickRant for today.
I was attempting to sign up for the new online banking option for my credit union, to save myself from having to trek 20 miles into downtown during the day during the week to do anything related to my account. Happily fill out the little form, asking for my SSN and bank account number, hit submit and get a warning message from my browser: "This form is secure, but the information you're submitting is not. It's probably in your best interest to hit 'Cancel' now." So I look at the source to the form and discover that while the form and the confirmation page are both hosted on a secure server, the form that processes the data is not. Duh? And even better, even if the script was hosted on the secure site, it's a form mail script, so my information is getting sent in a plain text email.
Or rather, it's not. I sent email pointing out that it wasn't exactly secure and asking if they ever planned to make it that way, and every address listed on the site in turn bounced back with "user unknown/relaying denied" messages. We can't even set up a webmaster address that doesn't bounce, but we're going to do online banking. Uh huh. And then, out of curiosity, I went to the account management page to see if they were set up similarly, and was presented with a huge error message: "Sorry, your browser has JAVA disabled or it is not supported. Please check you r browser's settings. " Strike three. Bzzzzt. Thank you, drive through. Ah well, I've had that account for 10 years and only use it these days to autopay my student loans from; closing it out won't be a big hardship. =)
I was attempting to sign up for the new online banking option for my credit union, to save myself from having to trek 20 miles into downtown during the day during the week to do anything related to my account. Happily fill out the little form, asking for my SSN and bank account number, hit submit and get a warning message from my browser: "This form is secure, but the information you're submitting is not. It's probably in your best interest to hit 'Cancel' now." So I look at the source to the form and discover that while the form and the confirmation page are both hosted on a secure server, the form that processes the data is not. Duh? And even better, even if the script was hosted on the secure site, it's a form mail script, so my information is getting sent in a plain text email.
Or rather, it's not. I sent email pointing out that it wasn't exactly secure and asking if they ever planned to make it that way, and every address listed on the site in turn bounced back with "user unknown/relaying denied" messages. We can't even set up a webmaster address that doesn't bounce, but we're going to do online banking. Uh huh. And then, out of curiosity, I went to the account management page to see if they were set up similarly, and was presented with a huge error message: "Sorry, your browser has JAVA disabled or it is not supported. Please check you r browser's settings. " Strike three. Bzzzzt. Thank you, drive through. Ah well, I've had that account for 10 years and only use it these days to autopay my student loans from; closing it out won't be a big hardship. =)
