HTML POST to another site

[Kit Truong]

I have a form on a secured server, i.e https://myform.com/form.asp

The data from this form has to be stored in a database on another webserver
that is not secured with the POST command, i.e.
http://saveform.com/saveform.asp

My questions are:
1. Is the data still secured when posting from an ssl site to not ssl site?
2. Will there be security warnings when client leaves secure site.
3. Any other ideas?

Thanks.

 

[Jeff Thies]

I have a form on a secured server, i.e https://myform.com/form.asp

The data from this form has to be stored in a database on another webserver
that is not secured with the POST command, i.e.
http://saveform.com/saveform.asp

My questions are:
1. Is the data still secured when posting from an ssl site to not ssl site?

No. Why would it be?

2. Will there be security warnings when client leaves secure site.

Yes, unless client has turned off warnings.

Jeff

 

[Art Sackett]

1. Is the data still secured when posting from an ssl site to not ssl site?
No.

2. Will there be security warnings when client leaves secure site.

This depends upon client configuration, but there will in many or most
cases be client security warnings.

3. Any other ideas?

If you have the ability to deploy some kind of software on the SSL
server, write or buy something that will take in the data on the SSL
server, then transfer it *securely* to the target host. If it was mine
to do, I'd use SSH (or scp) to transfer the data from the SSL server
to the target host.

The cleanest implementation would be to just go ahead and buy the
signature for an SSL cert on the target host. It'd probably be cheaper
than the cost of labor to write a custom app for the SSL server you're
using now.