SSL form source code on http page seems to work. Is it?

  • Profile Image
    SpiritFlight
    Asked on December 13, 2011 at 02:01 PM

    To whom it may concern,

    Over the last two days I have been creating a registration form using your amazing program. Of course it helps to be a little web litterate. I copied the text below from an aswer that was given to a question on your web site.

    "If the address of your page does not start with https, it is not secure and you can't embed the secure version of your form(s) there. Instead, the only option would be to put just a normal text (or image) link to your secure form. In other words, if your page is not secure, you can't have the actual form appear on that page. Users would need to click a link on the page that would take them to the form. The closest you can get to the actual form appearing on your unsecured page would be an image of the said form. This is different than an embedded form which can be completed and submitted from your page even though the form doesn't actually reside there.

    If you need additional clarification or want to know more about other features of our forms, our team will be glad to help.

    ~ Wayne"

    The URL for the embedded code on my site is the following...

    http://sacredperuadventures.com/programs/registration_form.html

    The address is an http address and not an https address, yet the code was emebedded and the form appears to be working. 

    Question... Is the form secure?

  • Profile Image
    fxr
    Answered on December 13, 2011 at 05:08 PM

    You can still embed secure content in non-secure webpages. 

    The issue is that a users web browser will NOT report the webpage as secure. 

    The form itself is still secure i.e using encrypted communction, although embedding secure content in a  non-secure webpage does technically mean there is more potential vulnerabilities in the encryption used for the communication between the form users PC and JotForms servers. 

     

    Hope you find that information useful. 

  • Profile Image
    SpiritFlight
    Answered on December 13, 2011 at 05:17 PM

    That is what I needed to know. I now have and https page for this form. Thank You!

  • Profile Image
    fxr
    Answered on December 13, 2011 at 05:33 PM

    Oh, I see that now, and the entire page with the form included is reporting as completely secure. 

     

    Good work!