HTTPS (very) simple question

[lucidtech]

I've never worked with https before. I have login fields located in the top navigation bar of my index page. I want the login data to be sent via https. My question is...

Does the URL sending the data have to be HTTPS too, or just the one recieving it? IE. can I use regular HTTP for the login page, but the data is submitted to HTTPS, or do they both have to be HTTPS?

 

[BillyRayPreachersSon]

Both do not have to be HTTPS - just the target (form action) page.

HOWEVER... If both are HTTPS, then you will get no warning messages in your browser. If only the target page is, then you probably will, so it's best to make both HTTPS.

Hope this helps,
Dan



Coedit Limited - Delivering standards compliant, accessible web solutions

[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]

 

[lucidtech]

I kinda want the warning message... so that the user knows that the data is secure.

Thank you for the reply, Dan

 

[BillyRayPreachersSon]

I think you misunderstand... the warning message would probably do more damage than good. It tells the user something along the lines that thewy are submitting data from an unsecure page.

IMHO, you would do better to not have it.

Dan



Coedit Limited - Delivering standards compliant, accessible web solutions

[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]

 

[lucidtech]

How is it going to change my website if the index page is loaded through HTTPS? Or should I just take the login off the index page and have a separate login page?

 

[BillyRayPreachersSon]

It's always marginally slower to load a page over HTTPS than over HTTP, but this delay would be negligible. Whether you put your login on its own page or not is up to you - if you have a space for a login form on your main page, go for it... otherwise, having a new page wouldn't hurt.

Dan




Coedit Limited - Delivering standards compliant, accessible web solutions

[tt]Dan's Page [blue]@[/blue] Code Couch

http://www.codecouch.com/dan/

[/tt]