Make forms submit over HTTPS
Why it matters
A form that posts to an http:// address sends whatever visitors type, such as passwords or contact details, unencrypted. Browsers also warn visitors before submitting it.
The fix
- Change the form's action to an https:// URL, or to a relative path when it posts to your own site.
- Check that the endpoint accepts the post over https; for a third-party form service, use the https URL from its current embed code.
html
<!-- before --> <form action="http://example.com/subscribe" method="post"> <!-- after --> <form action="/subscribe" method="post">
The examples use example.com. Replace it with your own domain.
Related
Scan your domain to see whether this applies to you.