A user is connecting to an e-commerce server to buy some widgets for a company. the user connects to the site and notices there is no lock in the browser security status bar. the site does prompt for a username and password and the user is able to log in. what is the danger in proceeding with this transaction?