A growing number of high-profile account hijacking attacks on prominent websites have highlighted that while we routinely employ countermeasures to deal with sophisticated attacks, most organizations don’t provide end-to-end encryption when transmitting confidential data of people using their web sites. We will explore why there is technical inertia and the call to action by the industry leaders.