Ssl login form?

Question

I have SSL on my site .... When a user logs in from an http page, the form action is sent to the https page, will it be saved in the published data?

Or would it be better if the form and page were sent to both SSL?

thanks

Answer 1

is he absolutely necessary both for the page with the form, and for the page that will be transmitted to HTTPS. If the page with the form does not have HTTPS, you cannot guarantee where this form is submitted. It may not actually go to the HTTPS page (you expect your visitors to see the source), or something may have inserted some kind of malicious javascript to redirect the form to another location. However, if the form is also HTTPS, you know that it has not been modified.

Security is more than just marking the box that says “I have encryption,” it's a whole process.

( " FROM, TO HTTPS), : HTTPS ( SSL/TLS ) - , . TRUST:

• , . , ,
• , .

HTTPS FROM, № 2 ( FROM ), , # 1 . , - , , ?

Answer 2

, - . (Fiddler, NetMon,...) . SSL. , "lock" . , , , SSL ( ).

Answer 3

You need to have a form page with SSL for security.