Is online shopping ever secure?

Jitena, the trend catching up is due to convenience. But it is not safe. The argument is whether it is safe or not? Not whether it is convinient or not.

Can you justify it is safe, taking into consideration that MITM, MITB, Trojans etc. exist and DNS poisining happens in real world? We are not even saying that encrypted passwords can be decrypted - noone des that - a hacker simply sits in between and transmits what he gets from you, and transmits to you what he gets from the site. In this process, once or twice he shows you his page, instead of original, and steals your identity. That's the end...

Yes, Dayanand, I agree, Mutual Authetication is the only way to prevent this.

Do you know fo some mutual authentication products that can do this? Cheers!

No wayyy.

I have bad experience of online services. Last year I booked my ticket online, amount was deduct from my credit card but while getting print out for the same it was unable to take out it shows software problem. After that, I had complained for the same. It took my lots of time to sort out the problem.

yes i totally agree with Mr. mittal's comment and it is true that the site which is asking for your credentials..is just collecting the information from the back end and this can be protected by the Mutual authentication process...but can you throw some more light on this subject...as i know very little on the subject....thanks...

Not at all! 

Think about this - When you go to a site asking for your username and password, what is the password you ask to the site in orer to authenticate the site itself???

Should you not authenticate the site? What is there is a Man in the middle? he takes yr credentials and pass it on to the server and takes info from teh server and shows to you?? You keep submitting your credentials to the website, which may be phished/hacked.

There should be a way to authenticate the site and the user, mutually, before the identity cerdentials are shared. Only when mutually authenticated, the conection is trusted and cannot be hijacked by anyone.

Mutual Authentication is a must. Unless this, no matter what you deploy, the hacking community will always be a step ahead. I am not aware of any technology that comes close to mutual authentication.

I don't think so that in India it is secure to shop n provide our confidental detail with hope that it wud never be hacked or stealed by anyone..Due to low level of awareness in people, many persons have taken advantage out of them...As we know that lack of knowldge abt security system is harassenin many.