Question for PowWeb

[digitalkidz]

I was going to update my credit card in OPS, but then I noticed that the page where you update the credit card information is not secure / encrypted. Is there a way where I can update my credit card through an encrypted web page?

[Doc C]

I just went in through Ops to the update the credit card information area and it shows as https for me. Are you under the Billing section?

[digitalkidz]

Yep, I went into "Billing" in both firefox and internet explorer and the browsers showed that the pages were not encrpyted

In firefox, I see a "lock with a red slash through it"

[Doc C]

I get the https in Firefox too but I do get the lock and slash. I also get the message that some of the data is unencrypted. A mouseover of the lock gives me "Signed by the USERTRUST network".

I've used that section of OPS for sensitive information and have never been worried about it. Maybe someone else has some input.

[joshuamc]

Hm. I'll have to get someone to look into this. I didn't think that simply linking to a non-secured location would throw a warning. I thought you had to actually include something like an image from a non https location to get a warning. If including these links causes the warning, why doesn't our orderform (https://secure.powweb.com/register/registration.bml?masters=524&promos=10_06_promoo) also have a security warning? Maybe it does and I'm not able to see it from my location.

[IanS]

It did here at work (put up the security warning) using IE6 on XP Pro.

Sorry - that was redirected to a different place and a warning came from that page.

On third attempt, after accepting the security warning, it linked to the correct promo place.

Maybe what I'm seeing is a result of being behind so many software and hardware firewalls at work. I'll try again at home later.

[digitalkidz]

Does anyone know whether or not an encryption will be added?

[HalfaBee]

Just go to https://ops.powweb.com

[YvetteKuhns]

keyplyr, I have seen this elsewhere and I agree. ;)

[digitalkidz]

Firefox still shows that the "Billing ---> Update Credit Card" page within OPS is only "partially encrypted" - Is there another way where I can update my credit card over a fully encrypted page on PowWeb? Thanks!

[phlembol]

Could it be that this call to JS is relative and not absolute with "https://etc"?
<script language="JavaScript" src="/powweb/pow_scripts.js" type="text/javascript"></script>
I expected to find an image linked wrong but all look to be secure.

[digitalkidz]

so even though Firefox says the "Update Credit Card" page under ops is unencrypted, do you think it will be safe to put my credit card # in there?

[HalfaBee]

I haven't heard of anyone having CC's missused when entering details in ops.

The message just indicates that some items on the page don't use the https link.

[YvetteKuhns]

I have been using my credit card here for years. That message you see appears, because the external JavaScript is a separate file that is called without using https. I never tried calling an external file with https, so I don't know if that helps. We have CSS in an https form, but it is in the same page. I am not sure if external CSS files do the same thing.

[dmacminn]

That section of Ops talks to a secure system that handles only Credit Card details (these aren't available to the rest of the Ops system [only first4/last4 digits display] -- the secure system sends the update on the info to Ops/Administration system after a successful change ---

And, just so you know, if you're asked for the Credit Card number to attempt an update, its because while it may be "onfile" in the secure CC system -- nobody in Technical or Billing Support (or Engineering for that matter) can see the numbers once they're in the system...