I'm tempted by the free Yackie Mobile SIM card offer, but I'm concerned about their website security and privacy.
Is anyone else concerned?
SECURITY
The YackieMobile.com web page for ordering is not secure.
The SSL security certificate expired on 17 Oct 2007.
Screenshot showing expired SSL certificate is attached to this post.
https://www.yackiemobile.com/order
Also, the page to submit personal information is not secure. I tried forcing the URL to https, but it reverts back to regular http without encryption.
This means that all personal information, including name, address, birthdate and security questions are transmitted without encryption.
http://www.yackiemobile.com/members
Yackie Mobile's security policy states the following:
Quote:
|
For our on-line web reservation service, we use industry-standard SSL-encryption and proprietary security methods to protect data transmissions and to provide secure sessions.
|
PRIVACY
One of the security questions required is one's mother's maiden name. In the US, this answer is used for some financial institutions.
Considering that this required security question is transmitted without encryption, I'm concerned about how private the information remains.
In the wrong hands this information can be used for identity theft.