On: Highly Evasive Attacker Leverages SolarWinds Suppl...

[Wheaties466]

I wish that were the case, but unfortunately some credit card processors still send some credit card processing payloads over http in some circumstances.

[colejohnson66 → Wheaties466]

Is the actual payload encrypted, but just sent over HTTP? In that case, it’s bad, but not as bad as unencrypted over HTTP.