When on any retailer website at the very end we are asked to make a payment. However it is not uncommon to not be taken to an external portal, usually, for example, aliexpress and Amazon will ask to use your credit card details while still on the website. e.g. the url that Aliexpress will ask you to enter your credit card details on is
shoppingcart.aliexpress.com/orders?=.... However this also holds true for Amazon and every online retailer.
My question is, it doesn't matter if the website is over
HTTPS, all that means is that the data is being sent over encrypted. My concern is that the website you're on, could still store and keep the information you wrote because you're still on there website.
Is this concerning? For this reason I will only ever make payments using Paypal and verify the digital certificate is from