Is there a way to force a non-secure form post to be secure? I understand there are ways to automatically resolve an http URL as an https URL but with form posts, is this type of redirection too late? Will the posted data have already gone through the wire as plain text?
Share
Technically, no. You can however make the form’s
actionattribute a fully-qualified HTTPS site, regardless if the protocol that rendered it is secured or not.Yes since a redirect happens on the server by issuing a 301/302 status code in the response.