Security Certificates and how they work??????

[Celebration]

Okay, I really want to order custom printed CDs from this company

http://www.high-techproductions.com/disc_ordering.asp

I have the feeling that they are legitimate, etc. but I have never done business with them before.

The same okay sounding man answers the 1-800 number every time, and says they have been in business for 33 years.

But when I go to order, it says there is a problem with the "security certificate." It gives me the option to click through it, which is what the man told me to do. When I questioned this, he said that it was still encrypted, and that it was just paperwork. My credit card number would not be going out on the internet or anything like that. I have a feeling they may not be paying some charge that the encrypting company wants but I have no idea how this works.

They can't take orders by phone for custom work.

The price is good enough that I am willing to take a chance with the money in the amount I am going to order.

However, I don't want to risk stolen identity or anything like that.

What are the risks here? Does anyone know?

[EvolveOrConvolve]

1. Don't do it!

If this "legitimate" company is either too cheap to pay for their SSL certificate (that they can get for $30 - $40) or doesn't have the money to do so, then I wouldn't order anything from them. I wouldn't buy anything from them until you can order with true confidence that your information is safe.

Quick question: have CD's even been around for 33 years? Or are they a company that does a lot of specialty stuff like this.

[Celebration]

2. well if he is telling the truth

And I *think* he is, he may have started out with VHS stuff. They do duplication, too.

Thanks for the advice.

I may investigate further, find out where their offices are, call BBB.

I'm not that worried about losing one hundred bucks or so--I just don't want my credit card stolen.

Hmmm.

[Celebration]

3. Found one lousy review

It had to do with when a project was mailed, not a big thing with me, but even so I think I will look elsewhere.

[EvolveOrConvolve]

4. Call the guy and let him know why you're doing that

He needs to understand that having poor security is losing him business. And unless his IT company is completely stupid, this sounds like something that can be fixed fairly easily.

The chances of having your credit or identity stolen because of this security hole is slight, but it's like yelling out your Social Security Number on a busy street. You probably won't have someone write it down and use it for nefarious purposes, but it doesn't seem like the safest thing to do.

[MyNameGoesHere]

5. Well yes the certificate is not working

because it has expired. But it was a valid one. And actually this company may not even be at fault, could be a no good hosting company falling down on the job. And by the way, I can put up a website and throw a certificate I MADE out there and you would feel more comfortable? I bet over 25% of the websites out there have "bad" certificates. As always, and you did this i see, call the people and find out if they are legit. A bad certificate does not necessarily mean the sky is falling as some would believe.