What is JotForm?
JotForm is a free online form builder which helps you create online forms without writing a single line of code. No sign-up required.

At JotForm, we want to make sure that you’re getting the online form builder help that you need. Our friendly customer support team is available 24/7.

We believe that if one user has a question, there could be more users who may have the same question. This is why many of our support forum threads are public and available to be searched and viewed. If you’d like help immediately, feel free to search for a similar question, or submit your question or concern.


  • Profile Image

    SSL enabled form embed code on non-SSL parent page

    Asked by thomaszw on February 24, 2016 at 07:54 AM

    Hello

    We have one of your forms on our website, see on the link below. Sometimes our clients are asking if this form is not secure because there is not https:// but only http://. What about that issue? Are the forms submitted with SSL or in a not secure form?

    Thank you and bet regards

    Thomas

    Page URL:
    http://www.himalayatours.ch/infos-anmeldung/anmeldung/

    SSL non-SSL parent page
  • Profile Image
    JotForm Support

    Answered by Charlie on February 24, 2016 at 11:45 AM

    The form itself is loaded on HTTPS and it submits on SSL. I can say that the data on the form submitted in our end is secure. However, the page where the form is embedded, which is your website, is not secure, it can be used as the point to where a hack or unsecure action can be done. 

    To make sure that the form and the data will be secured, the only way is to use both HTTPS on the parent page (your website itself) and on your embed code (which is already SSL enabled).

    I see there are some articles and discussions about this when I searched the web, you can refer to the following links:

    http://www.tinywebgallery.com/blog/iframe-do-not-mix-http-and-https 

    http://stackoverflow.com/questions/17442623/ssl-page-iframed-in-non-ssl-page-is-form-submission-still-secure 

     

    I hope that helps.