[emilv]

And the user still has no way of ensuring the safety of the underlying transport. How do I know the form is going to be sent over a secure link after a push the button? Who will get this credit card? It doesn't say anywhere. But the blog post tells me the info is going to be sent to a third party, but that is not explicit in the form. I hate that "security" is all about meaningless icons, not about being transparent to the user.

[sunir]

Security has always been mostly illusions to help us overcome our fears to get through the day rather than real defense. So what if we all have our security blankets to chase away the monsters?

The real security is using a credit card where you can undo the transactions after the fact, which is amazing if you stopped and thought about it.