Patent ID: 8677129

Claim:
A computer-based method comprising: receiving, by a web browser of a client computer, a password of a user to initiate secure socket layer (SSL) communications with a transaction site on a server connected to the client computer via a communication network; verifying, by a secure transaction module that is connected to the web browser and executed by the client computer, that a web session associated with the SSL communications is encrypted by determining that a domain name of the transaction site corresponds to a SSL public key, the domain name being obtained from a domain name table that is connected to the secure transaction module and executed by the client computer, the SSL public key being obtained from a public key table that is connected to the secure transaction module and executed by the client computer; querying, by the secure transaction module, an exclusion list with the domain name of the transaction site to determine that a security of the transaction site needs verification and that the transaction site is not on the exclusion list, the verification being initiated by querying an allowed list with the domain name in order to determine whether the transaction site is allowed to continue the web session; and adding, by the secure transaction module, the password at an end of a uniform resource locator (URL) referrer field of a hypertext markup language (HTML) header of a message before encrypting the message, the message being generated by the user within the web session to execute a secure electronic transaction via the communication network.