If the UCCU main page was not secure, then the same ARP trick could be used to display a fake UCCU page which redirects to a non-secure rogue page to steal login credentials. So I for one, like the fact that the whole site is encrypted.
My credit union (America First) uses a two-step, account # and then pin log in process that assures that I am not being phished. The second step displays a photograph that I have select and requires that the computer I am logging in from either be registered or I have to answer multiple questions.
(I agree that that is more work then waiting for a secure page to load however, but I do compliment them for and appreciate their security measures.)
smime.p7s
Description: S/MIME cryptographic signature
/* PLUG: http://plug.org, #utah on irc.freenode.net Unsubscribe: http://plug.org/mailman/options/plug Don't fear the penguin. */
