eBay does not use HTTPS on its My eBay dashboard, nor on its business-to-customer message pages. As a result, private customer information and messages are not sent over private channels, thus the information is vulnerable to hackers. This could lead to fraud or spam being sent from user accounts. A VPN can mitigate the risks that arise from the lack of HTTPS on these pages.eBays lack of encryption could be insufficient to meet data privacy standards, including the upcoming GDPR.”]
Source: https://informationsecuritybuzz.com/news/ebay-messages-account-info-user-activity-not-secured-https/