I think people are looking at this the wrong way. SSL enables you to know who you are giving your credit card details to, same as doing this over the counter, what happens from there is anyones guess, who is stopping the person behind the counter taking your card details when doing face to face shopping. VeriSign ect all authenticate the site so the padlock enables you to give your details to a server know no-one else can see it. However like anything else if you don't trust the store don't give your CC details.

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/columns/60/10582#10582