[viljoviitanen]

Am I missing something, because having https shouldn't have any impact on us publicly showing the account number or not.

EDIT: ah wait, I think I understand now. You're not talking about the transaction, but just making sure that is really our account. That's a pretty good point, in that case.

Yep, it doesn't affect you directly, but indirectly if people donating send their monies to the fraudster instead of the xbmc foundation.

Not that it's likely that someone modifies the page on the fly to switch the account number, kodi is not THAT popular, but security by unpopularity is no security... At least with paypal you see who you are sending money to.

Although, I must say I'd click the paypal donate button with more confidence if it the page the button is on was https.

Really, there's no excuse for not having https, just do it. If you can't for whatever reason, get help, e.g. from me. Make it a priority.

(P.S. http://www.httpvshttps.com/ )