I have to make several transaction through credit card. Sometimes, unsecured sites due to business.
When transacting through unsecured (have no ssl), is there any way to save my data from hackers proxy server?
Questions on Server Fault are expected to relate to professional server, networking, or related infrastructure administration within the scope defined in the FAQ. Consider editing the question or leaving comments for improvement if you believe the question can be reworded to fit within the scope. Read more about closed questions here.
If the site is unsecured, i.e. does not use SSL at all, then your information must travel to that server in plain, and anyone capable of listening in on that last hop will have your data. That might be a bad proxy server, introduced e.g. through some form of cache poisoning, but it might as well be some maintainer of an intermediate transport network listening in on the traffic under his control.
So I'd suggest not to transmit credit card information over a plain connection, ever.
EDIT: It is not secure to transmit credit card information over a plain connection.
If your transacting site is using SSL, but your are not sure is that safe; then Utilize
For more #
You shouldn't enter your credit card details on any unsecured website regardless of what it's for, ever, there's just no justification for a company to have gone to the trouble of providing a webpage to take these details and not secure it. If they're not bothering with SSL I'd also worry about how they're storing the details. In my country (UK) businesses should also be PCI compliant which also covers how the details are stored, who can access them, how often passwords are changed, quarterly 3rd party scans any servers involved, etc, etc.
Ring these companies up and give them the details over the phone, and then tell them that they are seriously risking their customers security by not paying a tiny amount of money each year for an SSL certificate. (They could even install a self-signed certificate for free if it's a private site only taking details from known people that are happyto do it this way)
EDIT: Just to answer the actual question rather than point out anyone that does this is an idiot, the information travels from your machine to the web server in plain text and can be seen by anyone in the path. It could end up being seen by anyone who has access to equipment along the way, it may even end up in logs if ISPs are logging packets. The correct way to secure this is to use SSL.