[EMAIL PROTECTED] (Jack Killpatrick) writes:

> If I have a form that is non-secure (not using https/SSL) and I have the
> action as something like:
> 
> <form action="https://www.domain.com/cgi-bin/file.pl" method="post">
> 
> will the form data be sent encrypted or not uopn submission? 

I don't know. But neither does your prospect. I stumbled on such a
form yesterday, proclaiming that it would switch to https on
submission.

The psychology of the *open* chainlock indicating a non-secure
transaction is pretty strong in that situation.

So, even if it's technically a secure submission, from a more
practical point of view it might be better to have the form itself
also being served from https. Might cost you extra CPU cycles, might
gain you extra customers.

:*CU#
-- 
***    Guido A.J. Stevens      ***    mailto:[EMAIL PROTECTED]    ***
***    Net Facilities Group    ***    tel:+31.43.3618933    ***   
***    http://www.nfg.nl       ***    fax:+31.43.3560502    ***   

PGP fingerprint E3 56 AA 30 44 EE 9E E9 CA 52 C5 B8 66 2F 77 21
____________________________________________________________________
--------------------------------------------------------------------
 Join The Web Consultants Association :  Register on our web site Now
Web Consultants Web Site : http://just4u.com/webconsultants
If you lose the instructions All subscription/unsubscribing can be done
directly from our website for all our lists.
---------------------------------------------------------------------

Reply via email to