.@united’s verified by @Visa introduces plain text post back. Doesn’t seem to be helping secure much :/

.@_mwc @alvrod @united @Visa On the bright side, no worries about Heartbleed

@_mwc @BrendanEich @united @Visa yea, there's a lot of web security these guys don't seem to get. maybe they only tested in one browser.

@_mwc @united @Visa It is 3-DS TermUrl which only processes PaRes (non-sensitive data) and MD (which should already be encrypted).