<i>"We utilize best practices and are confident that our systems are secure."</i><p>Why, then, doesn't the link to <i>"join the MileagePlus program"</i> (<a href="http://www.united.com/web/en-US/apps/account/enroll.aspx" rel="nofollow">http://www.united.com/web/en-US/apps/account/enroll.aspx</a>) use https?