Secure Logon?
I don't get it. When I need to logon to a secure site, I expect to see a https url before I enter my username and password. All the sites listed below (except Citibank) prompt you for the user name and password on a http page and it says that the information will be posted via https. Even though what they claim is correct, I do not feel comfortable with the approach. How do I know that the http page I am looking at is spoofed or not? Check out these sites:
The way I work around this is to bookmark the secure url. Example: PayPal
Is it really that CPU intensive to run the default homepage on 443? Could they have used SSL acceleration? How about a logon button on the default http page that redirects me to a https page where I can enter my credentials?