Re: https-Question

Chris Morris <c.i.morris@xxxxxxxxxxxx> writes:

Sherm Pendley <sherm@xxxxxxxxxxxxxxxxxxxxxxxxxxxxx> writes:
Wilhelm Kutting <wkutting@xxxxxxxx> writes:

Am i right that only a https login-Form-page would be safe?

Whether the form itself was fetched from an http:// or https:// URL is
irrelevant. If the action of the form lists an https:// URL, the data is
encrypted when the form data is sent to that URL.

*However* it's worth having the form in https too, if that's
practical, so that a concerned user can be sure that the form they see
is the form your server sent (assuming they trust your server
certificate).

Good point - I took the question too literally, and answered it in a
technical sense only. Putting your form on an https:// URL isn't strictly
necessary for technical reasons, but it will definitely help your users
feel safer.

sherm--

--
Web Hosting by West Virginians, for West Virginians: http://wv-www.net
Cocoa programming in Perl: http://camelbones.sourceforge.net
.