I’ve been saying for some time that browsing and doing transaction over HTTPS or TLS (when the padlock comes up in the address bar) is completely secure with the exception of your internet service provider may know what site you went to. If you don’t believe me, here’s Leo Laporte to confirm it.