I do computer software design for a major bank, Wells Fargo, and I work with encryption and sensitive customer data issues. This guy is correct that asking people to provide sensitive information on a form that is not using SLL (https://...) is taking a risk of legal exposure.
XJW User Submitted News & Views at http://xjwnews.com