Only slightly related but even Amazon isn't on HTTPS, which I find to be a much bigger issue since they deal with credit cards
Both https://amazon.com and https://amazon.de work for me.
Re:Flash-Free Video in 2016
by atom_enger on Monday February 08, 2016 @01:06PM
(#11059753)
Was hoping someone would say this. This should be the only thing they focus on this year until it's done. I see that they POST to a secure endpoint when logging in but that doesn't make a difference once the session cookies are transmitted in the clear.
Re:Flash-Free Video in 2016
by flavioribeiro on Monday February 08, 2016 @02:07PM
(#11060188)
yep, this is on our roadmap
Secure the damn web.