- Ron SherwoodAsked on June 01, 2015 at 11:17 AM
I need to develop a form that collects confidential financial information, so it needs to be encrypted before transmission. However I do not have SSL on my website.
It isn't clear in your FAQ whether the site needs SSL in order to encrypt the data, or whether Jotform handled it.
Do I need SSL on my site in order to send the data securely? If not, could you please point me to documentation on how to implement encryption in a form?
Also, I will be using the Zoho integration, if that makes any difference.
- BorisAnswered on June 01, 2015 at 12:14 PM
Please note that your website should have SSL certificate for itself as well, to avoid running into so called mixed-content issues. While the form may be embedded as a secure form in a secure iFrame on a non-secure page, I believe most modern browsers would either block some of the resources or block the form.
This happens because there would be secure form content - which can't be tampered with by man-in-the-middle - mixed on the same page where there is non-secure content - which can be modified by a man-in-the-middle attacker. As the non-secure parts of the page compromise the security of the secure form, it is recommended that you embed the secure SSL form only on a secure SSL website.
If you do not have SSL certificate for your website, you can go around this requirement by providing secure direct links to your JotForm forms on our website. In other words, you could make it an ordinary link and write to your users:
Please click this link to fill out the form and order your XYZ product.
If your users are filling out the form directly over a secure link, their submissions will be secure. You may also want to check out our guide about secure SSL submissions: How-can-I-receive-SSL-Submissions
When it comes to Zoho integration, you may want to check out these links:
Please let us know if we can assist you further, we will be happy to help.
- Ron SherwoodAnswered on June 02, 2015 at 07:18 AM
Thank you very much! Your reply is very helpful, and answered my questions.
We'll decide whether to get an SSL certificate for our site, or just link to the secure form on Jotform.