Forum Moderators: phranque

Message Too Old, No Replies

Form on non-secure page submitting to secure URL

Is the data transmisison secure?

         

MatthewHSE

6:33 pm on Apr 3, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



The subject line about sums it up... If I have a form on a non-secure page, but the
action
attribute is pointing to a secure URL, is the transaction actually secure?

I think it must be, but I thought it was worth asking about anyway.

physics

10:25 pm on Apr 3, 2008 (gmt 0)

WebmasterWorld Senior Member 10+ Year Member



AFAIK the actual transmission of the data when the user hits submit will be secure. However, entering the data may not be secure because there may be insecure JavaScript on the page that transmits the info before it's submitted (using AJAX, say).
In any case it's best to have a form that asks for things like a credit card on an actual https page so the user doesn't have to worry about this very question.