I'm a fan of the podcast/NPR show "Bullseye." The show is going on a live tour this month, and I was directed to a page on NPR's website to buy tickets. I filled out a form with my personal info, then was directed to the last page to enter my CC info...and saw no HTTPS. No lock, no security that I could see. Am I crazy to avoid entering my information into this thing? If they don't even have HTTPS, I can't have much faith that they're storing the data properly. When I see that, I just assume that all my personal info will be stored in plain text for any hacker to grab.

How have people not gotten the message?