[TedDoesntTalk]

Unfortunately, not all websites used https or enforced it on pages that should have had it. It was very common to see payment forms submitted over http. That is why browsers evolved to the point where Chrome now won’t submit certain types of html form fields over non-https.

[gruturo]

I'm aware of it - even talked some people out of attempting ecommerce without SSL about 20 years ago (not all successfully).

But the linked article specifically mentions an HTTPS link.