One of your relatives wants to try online shopping but is suspicious that her credit card number might get stolen from a merchant’s server by a hacker using a packet sniffer. Is it correct to tell her...

One of your relatives wants to try online shopping but is suspicious that her credit card number might get stolen from a merchant’s server by a hacker using a packet sniffer. Is it correct to tell her that she can best avoid these potential rip-offs by using a secure connection, such as HTTPS? Yes or no?