5

I am required to submit personal information as part of a form. I looked under developer tools and found this:[![screenshot of item displayed in developer tools][1]][1]

Mixed Content: The page at https://example.com was loaded over a secure connection, but contains a form which targets an insecure endpoint http://other.example.com. This endpoint should be made available over a secure connection.

Is it safe to submit personal information over this website?

  • 2
    Hello and welcome to Information Security! Please do not post text as images. It is harder to read and search. – Anders Jun 29 '16 at 18:13
7

Danger Will Robinson, Danger!

The form on the site is not secure, and any data sent through that form will be in plain text. This means anyone listening to this communication will have a plain text copy of any data sent to that address.

If you don't know what data is sent there then you can't know if it's safe. Without code review you wouldn't know, and probably shouldn't trust the form. If it sends anything pertaining to secret or PII information, run away. Without a secure connection you can't be sure anyone is getting a copy of your data and should avoid sending it.

1

Look at the actual request that is sending the form data. That link is HTTP, hence you are in danger. "Mixed content" warnings are given when a website supports HTTPS ony partially, that is it fetches/sends some contents over HTTP, which can be intercepted, sniffed or changed by an attacker.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.