form encryption

Date view Thread view Subject view Author view Attachment view

From: Rusty Wright (rusty@socrates.berkeley.edu)
Date: Mon Dec 16 2002 - 15:53:53 PST

Question; if I have a file, form.html and it's called via

        http://host/form.html

and in that file it has

        <form action="https://host/form.php" method="post">

Is the data being sent securely (encrypted) from the user's browser?

Note that the form page is being displayed with http while the form's
cgi is being called with https.

I'm seeing this usage more often; it's a bit disturbing to fill in a
form with confidential information and not see the padlock at the
bottom of the browser window. My testing leads me to believe that the
form data is encrypted.
-----------------------------------------------------------------------
The following was automatically added to this message by the list server:

Webnet information is available at <URL:http://webnet.berkeley.edu/>.

Date view Thread view Subject view Author view Attachment view

This archive was generated by hypermail 2.1.5 : Mon Dec 16 2002 - 15:57:24 PST