Sigma Office Supplies

Office supplies website with unencrypted registration and account login pages

http://shop.sigmaci.com/storefront/Register

What is the problem?

Personal info, online ordering, registration, and password all sent via insecure HTTP connection.

Website uses a image of a padlock on the page itself, which can mislead and confuse users. Remember to always look for the padlock icon in the browser address bar itself.

Disclosure Policy

Prior to public disclosure, notification about any privacy or security issues discovered were sent by email to the operator of this website on 1st August 2015, using either an email address publicly discoverable on the site, or the RFC 2142 standards compliant address "webmaster@..." if no public email address was provided.

At time of posting the issue had not yet been resolved.