Quote:
|
Originally Posted by altis
Indeed - the page that displays the form uses HTTPS but the action of the form uses HTTP. I strongly suspect that Richard is correct in post #2 that this means that the contents of the form will be submitted insecurely to the next page - but I'm not sure. Anyone know for certain?
|
I work a lot with HTTP stuff and I can tell you with 100% confidence that that form will send insecurely (unencrypted) to an insecure page.
Someone mentioned that even if you phone them that they will most likely type it into the same screen - well at least they would be liable if something went wrong.