Tell HN: EBay offer mechanism is insecure

1 points by eveningcoffee 8y ago ↗ HN

eBay allows sellers to provide an offer mechanism for the buyers. Exchanges between them are also communicated over email.

I noticed today that accepting offer redirects to a insecure http://offer.ebay.de where I was able to accept the offer.

1 comment

[ 4.7 ms ] story [ 11.6 ms ] thread

eBay is not known for their attention to security.

That said, I wonder whether that particular exposure is limited to eBay Germany or is paralleled worldwide.