Correct me if I'm wrong - looking at the source code, Facebook submits the form over https, though the page is http.
By itself, a leak of information may appear trivial, but piece together a few bits of info and mix in some social engineering, and you could have enough to do naughty things!
Yes, users should use different passwords, but you should be the one who does the right thing and takes the responsibility for them, to prevent that exponential spread of consequences. It's more than just "This cert cost me x", it's "If I spend x, I save y people from losing z of time and money." where x<y<z.
This doesn't really count as rating, but here's some feedback...
- Love the logo - it's sweet and there's real attention to detail in the typography.
- On the pricing page, the mouseover tooltips are offset and transparent, which makes for some strange placement! I'm running FF3.5.8 on WinXP.
- Everything thing you'd expect from a 'web2.0' style site is there and good: the clear calls to action, the simple navigation at header and footer.
- Some of the text would benefit from a copy-writer or proofreader to tidy up a few loose threads (for example in the FAQs, What do I get? "When you send an letter on mailfinch..." should be a letter. I'm nitpicking at detail, but when you've got things so right, the little details show up even more.
I'm definitely not saying it's bad. On the contrary, it's very friendly, and gently persuasive ("We encourage our clients to purchase a Freelance plan to start off with... you can easily upgrade at any time"... lovely!)
- I like the new name more - it's more 'positive' than SnailPad. Snail is slow, finch is swift.
- What's the take up on your PAYG plan? If the margins are worthwhile, I'd push that as equally as your monthly plans for people who don't want to commit.
- I'd love to give it a try, but I currently have no need to send a letter.
By itself, a leak of information may appear trivial, but piece together a few bits of info and mix in some social engineering, and you could have enough to do naughty things! Yes, users should use different passwords, but you should be the one who does the right thing and takes the responsibility for them, to prevent that exponential spread of consequences. It's more than just "This cert cost me x", it's "If I spend x, I save y people from losing z of time and money." where x<y<z.
StartSSL offer well priced certificates - from free, up to ~USD150, and they are well reviewed here: http://www.sslshopper.com/startcom-certificate-authority-rev...