British Gas security scare as payments page springs a leak
A British Gas website that allows homeowners to pay bills leaves consumers exposed by inviting them to submit credit card information across an unencrypted link.
Consumers logging on to pay their bills through house.co.uk initially go through a secure server. But once they create an account and login they may be transferred to a payment server that fails to use a HTTPS connection. The problem is down to coding errors, according to a leading UK security consultancy.
At The Register.
[ Read more ]