Can we use a secure SSL form on a regular HTTP website

  • michaelroback
    Asked on January 9, 2015 at 3:56 PM
    2) I need to be able to receive SSL forms. I have my JotForm embedded as a link on my blog. Patients complete and their response gets emailed to me. My understanding is that to have it be SSL, I need to have a secure https website. Is this correct? If there is a way to receive secure forms on my blog, this would be reason enough to consider paying for the upgrade. Please let me know as soon as possible.
  • David JotForm Support
    Replied on January 9, 2015 at 5:01 PM

    Hi,

    You could include a link to your secure form within the page, rather than embedding the whole form.  This would ensure that there are no issues with the secure form in your page.  For example, this link will take you to a secure version of one of my test forms:

    https://secure.jotformpro.com/form/50084584460960

    Also using the iFrame embed method:

    http://www.jotform.com/help/148-Getting-the-Form-iFrame-Code

    Checking the secure box in the process, should also allow you to receive secure submissions in a non secure page.

    Let us know if you have any further questions and we will be happy to help.

     

  • michaelroback
    Replied on January 9, 2015 at 9:28 PM

    I have a blogspot blog, not a traditional website. I am still wanting to know if I can embed or add link to a blog page that one can securely submit? I need to know this as it determines whether I should pay for the paid plan or not. Can anyone help! 

  • Ashwin JotForm Support
    Replied on January 10, 2015 at 12:42 PM

    Hello michaelroback,

    Yes it is possible to embed secure version of you form in your blogspot to receive secure / SSL submissions.

    You need to simply grab your form's SSL emebd code and use it in your web page. The following guide should help you:  http://www.jotform.com/help/63-How-can-I-receive-SSL-Submissions 

    Please be noted that if you want to receive SSL submissions you can only receive up to 10 SSL submission in your free account. If you want to receive more SSL submissions, you should upgrade your account. You may like to take a look at our pricing page for more information on available plans and its submission limits:  www.jotform.com/pricing 

    Thank you!

  • michaelroback
    Replied on January 10, 2015 at 5:30 PM

    Thank You. I am almost ready to upgrade!! Just need a bit more info please ........ 

    1) If I embed the SSL embedded code to a "link" on my blog rather than to actually embed it in the html of the page does it make a difference in terms of it being secure. I tested it and both ways it shows up in Jotform as a SSL submission?

    2) I notice that when I have it embedded on my page, that in transmission the url bar reads: secure.jotform.us.  Is it possible to not have that appear, as I do not want my patients to know that I am specifically using jot form! Also the https does not appear. I had a patient that said this is not secure as I do not see https in the url bar!! Any ideas?

    3) Is the info secure and encrypted when it hits the Jotform Server, so that only I can see it, and when it is deleted is it permanently erased. Or can the JotForm staff staff see the submission?

    4) I assume that if any of the info is sent to email, it is not secure. so better to just have a notification in email that a form has been received, with no info in it/

    5) Finally, I assume if sent to DropBox it is not secure? 

     

    Sorry for so many questions but I have been using the free version of your product for a long time, a with added SSL support and half off sale, it seems to be a no brainer! By the way how many more SSL submissions do I get with the Premium Package? 

  • Ben
    Replied on January 10, 2015 at 9:07 PM

    Hi Michael,

    As we can only provide assistance to 1 question per thread I will move some questions to a new thread, but will answer to those that are fairly similar or connected to the original question.

    1) If I embed the SSL embedded code to a "link" on my blog rather than to actually embed it in the html of the page does it make a difference in terms of it being secure. I tested it and both ways it shows up in Jotform as a SSL submission?

    Both versions are equally secure, there would be no difference in that. If you want it to be as secure as possible then there are 2 options. Using direct link to the jotform or using iframe embed code.

    Iframe code allows you however to have the jotform on your website and make it look more professional, while it would be as secure as the direct link.

    2) I notice that when I have it embedded on my page, that in transmission the url bar reads: secure.jotform.us.  Is it possible to not have that appear, as I do not want my patients to know that I am specifically using jot form! Also the https does not appear. I had a patient that said this is not secure as I do not see https in the url bar!! Any ideas?

    If you embed the jotform using iframe and change the thank you message to not show jotforms code, your visitors should not see anything that would say jotform. Using direct link would however show the jotforms full URL.

    This would be possible to change, but not on blogspot since you would not have access to cPanel.

    3) Is the info secure and encrypted when it hits the Jotform Server, so that only I can see it, and when it is deleted is it permanently erased. Or can the JotForm staff staff see the submission?

    I have moved this to a new thread where we will be happy to give you more details about it. You can see it here: http://www.jotform.com/answers/493908

    4) I assume that if any of the info is sent to email, it is not secure. so better to just have a notification in email that a form has been received, with no info in it/

    That is correct, no email is considered as secure (this is not only true for our systems, but for any system) - there are special cases (deviations) when this is not true, but it would require a lot setup on both sender and receiving ends. To help you set up the notification so that no data is made public that should not be, I have moved your question to a new thread here: http://www.jotform.com/answers/493909

    5) Finally, I assume if sent to DropBox it is not secure?

    We do connect to DropBox, but you would need to read their terms of use (which are a subject to change) as well as privacy documents.

    The best would be to inspect them and possibly contact their support to see their stand on this.

    I would like to suggest that you check Google Drive policy as well as possible alternative.

    Best Regards,
    Ben