Quote
i just noticed. you don't use SSL.
i registered for your site, and in no stage you use SSL to protect the privacy of your users' data (i used phoenix browser, based on mozilla).
worldpay does indeed have a secure site, but the personal details such as name and address are transfered unprotected.
cheers
avih
Hi,
Yes, as we use WorldPay to process all credit card transactions we felt we didn't have as much need for SSL as sensitive credit card transactions are held on the WorldPay servers, and no such data (except for customer names and addresses) is held on our server.
I've had a look at some of the other sites (not just osCommerce sites) that use WorldPay as their payment processor, and quite a few of them also do not have SSL in their sites. In fact, one of the most successful sites that I've seen using WorldPay is www.cd-wow.co.uk, which is a huge site in the UK. They've opted not to use SSL for customer accounts, and only use the SSL provided by WorldPay.
We're not sure what to do about it... but it's something we're thinking about.
Thanks for taking the time to browse the site and for posting your feedback. Much appreciated.
Phil