Create a new account
So they got a new affiliate program for their iTunes Music Store, but their sign-up page requires a Tax-ID (Social Security # for those w/o another Tax ID) and it's not SSL'ed.
Say it with me, folks: Sensitive information needs to be protected! Credit card, SSN (what else?) numbers, and login credentials that will lead to that information.
You're not totally right. SSL is not only about protectting your privacy from third parties. The problem with the form page not being served from a secure server is that you can never be sure that is has not been changed by an evil hacker to submit itself to https://apple.fishingproxy.com
SSL does protect against someone compromising your local DNS and pointing apple.com to their own server, which is worthwhile.
Unless you're using IE. IIRC there's an IE bug (now patched, but what proportion of IEs out in the wide world are patched) whereby it won't warn if someone is using a certificate signed by the wrong authority. Or something easily forgeable like that.
Get More Comments