[timthorn]

Typically, fun memory they'd move to a secure connection for credit card input, but most of the site would be open HTTP - why secure what isn't confidential? Concerns about 3rd parties eavesdropping on the sites you visited weren't a big thing at the turn of the century.