RE: Trac4 May 2018 19:53
I have tested the form submission and, despite the standard insecure HTTP connection, each individual 'call' appears to be made using HTTPS (which *IS* secure!)... This leads me to believe it is a temporary 'fudged' solution to provide access while the site is overhauled... Hopefully not the 'at face value' security risk implied, but highly unprofessional for a financial service provider none the less.
IMHO, DYOR, GLA etc etc