Geek asks and answers

Is the "Post" message modified from SSL to secure SSL?

I am exploring a new Authorize.net direct mail transfer method for processing credit card transactions. Earlier, my company used Auth.net AIM to process credit cards without leaving our site. This method requires SSL.

However, this new DPM, which Auth.net says the client still pays on our site, but we do not need SSL for security. It seems a little strange to me, but that is what Auth.net says. Here you can see the graphs: http://developer.authorize.net/api/compare/ .

So my question is this; if I have a page hosted without ssl (http: // etc.) that sends SSL messages (https: /// etc.), is the secure information POSTed?

Thanks for any help.

+3
source share
1 answer

Technically, the information can be safe in transit (after clicking the "Submit" button). But the person filling out the form cannot know that it will be safe (so why trust them on your site?). After all, if the URL string does not indicate that it is an HTTPS page, how should they know that it will be a POST on the HTTPS site?

I . , , , , (, ,), SSL.

: SSL - "--" ( ). , , .

"--" . , BGP, DNS , , " ".

+8

More articles:


All Articles