Sorry if this has been answered before, I couldn't really find this exact example and I wanted to get a clearer answer for a client.
I understand that an iframe with a https payment portal on a http (non secure) embedding site isn't safe.
If the site with the embed is https, and the payment portal embedded with an iframe is https, is that secure or would it be better to just forgo the iframe and link directly to the portal off site? And if so, why?
Thanks in advance :)