Funkcionalnosć tutoho sydła so přez wothladowanske dźěła wobmjezuje, kotrež maja waše dožiwjenje polěpšić. Jeli nastawk waš problem njerozrisuje a chceće prašenje stajić, wobroćće so na naše zhromodźenstwo pomocy, kotrež na to čaka, wam na @FirefoxSupport na Twitter a /r/firefox na Reddit pomhać.

Avatar for Username

Pomoc přepytać

Hladajće so wobšudstwa pomocy. Njenamołwimy was ženje, telefonowe čisło zawołać, SMS pósłać abo wosobinske informacije přeradźić. Prošu zdźělće podhladnu aktiwitu z pomocu nastajenja „Znjewužiwanje zdźělić“.

Dalše informacije

Tuta nitka je so archiwowała. Prošu stajće nowe prašenje, jeli pomoc trjebaće.

If the lock icon appears in the browser is it safe to assume that a PDF form will send my credit card information securely (over HTTPS)

  • 2 wotmołwje
  • 1 ma tutón problem
  • 8 napohladow
  • Poslednja wotmołwa wot DB

DB
DB
more options

If the lock icon appears in the browser is it safe to assume that a PDF form will send my credit card information securely (over HTTPS)? Or is the lock icon only relevant for HTML pages?

For that matter, does a lock icon also include the assurance that an HTML form will be posted securely?

If the lock icon appears in the browser is it safe to assume that a PDF form will send my credit card information securely (over HTTPS)? Or is the lock icon only relevant for HTML pages? For that matter, does a lock icon also include the assurance that an HTML form will be posted securely?

Wšě wotmołwy (2)

jscher2000 - Support Volunteer
jscher2000 - Support Volunteer
  • Top 25 Contributor
more options

When you are on a secure page, and a form on the secure page is submitting to an insecure page, Firefox should display a warning and let you cancel the submit. (See attached.)

However, I don't know whether that applies to forms hosted in a plugin, such as Adobe Acrobat. I'm trying to think of a way to test that... (I do not have a version of Adobe that can create a PDF form)

Wot jscher2000 - Support Volunteer změnjeny

DB
DB Prašer
more options

It appears that the Adobe PDF plugin does not give any warning about sending form data to an unencrypted URL (even if it is loaded via HTTPS) https://dl.dropbox.com/u/892408/sample-form-1.pdf

Firefox's built-in PDF preview does not support forms (as of Firefox 19), so that isn't an option either.

However I did notice that if you save the form and open it in the Adobe Reader application (instead of the plugin) it shows a confirmation dialog before sending form data. The confirmation dialog displays the URL so you can look for HTTPS in the URL (but Adobe does not check the integrity of HTTPS certificate).

As best I can tell, PDF forms are not a secure method of submitting credit card information since there is no simple way for the user to independently verify that the form contents will be encrypted before sending.