Tell HN: EBay offer mechanism is insecure

1 pointeveningcoffee1 comment

eBay allows sellers to provide an offer mechanism for the buyers. Exchanges between them are also communicated over email.

I noticed today that accepting offer redirects to a insecure http://offer.ebay.de where I was able to accept the offer.

eBay is not known for their attention to security.

That said, I wonder whether that particular exposure is limited to eBay Germany or is paralleled worldwide.