I have a page on a website that contains a secure form inside an iframe. Although the form data submitted is secure the page doesn’t appear secure as the URL in the browser is just HTTP. Is there anything I can do to show the users that the form is secure?
Share
Open the form in a new window or host the container page on a secure server. Users have a right to be skeptical of an insecure page hosting a supposedly secure page — it’s practically begging for XSS attacks.