Petition Closed
Petitioning Shutterfly Team Sites and 1 other

Shutterfly Team Sites: Use SSL to protect the security and privacy of children's personal information on team sites

Shutterfly team sites are popular for sharing contact information and photos for youth sports teams and classrooms.  Hundreds of thousands of children have their personal information stored in Shutterfly team sites.   Shutterfly's privacy policy states that “We use a secure server (SSL) to encrypt all of your personal information” (http://www.shutterfly.com/help/privacy.jsp#a9). However, all of the team site pages including the roster page are served without SSL. This leaves the children's personal information vulnerable to data snooping and session hijack attacks.

Letter to
Shutterfly Team Sites
Chief Marketing Officer, Shutterfly John Boris
Use SSL encryption to protect children's personal information on team sites

Shutterfly team sites are popular for sharing contact information and photos for youth sports teams and classrooms. Hundreds of thousands of children have their personal information stored in Shutterfly team sites. Shutterfly's privacy policy states that “We use a secure server (SSL) to encrypt all of your personal information” (http://www.shutterfly.com/help/privacy.jsp#a9). However, all of the team site pages including the roster page are served without SSL. This leaves the information vulnerable to data snooping and session hijack attacks.