Your depot should have a digital certificate so users can login using a secure connection.
Thanks for the advice, we would apply for a SSL license when we have more security sensitive services. For now, the payment is transacted via Paypal.com or other 3rd party service provider, they are trusted and well protected.
We are in serious consideration of your suggestion, security is one of the top priority and we are glad to put more effort onto it. Please kindly let us know if you have further concerns, thank you!