i just came across a paintball store with this....i guess i'll just phone them instead. not just going to risk my card details.
What if said company paid someone to create an ecommerce site for them and were told that it used encryption, when in reality it does not. Yes it's something that should be fixed, but it may not be the actual shop lying, they may think that they do have security on it.