Security
Form security
Why it matters
A form that submits to an http:// address, or a password field on an http:// page, sends what visitors type in plain text. Browsers warn visitors, and the data can be intercepted.
How to fix it
- Serve every page that has a form over HTTPS.
- Change form action URLs to https:// or relative paths.
- Redirect all http:// URLs to https:// with a 301.
Check it with
- Mixed Content Checker – Find insecure http:// images, scripts and styles on an HTTPS page.
- SSL Certificate Checker – Check an SSL/TLS certificate’s validity, expiry date, issuer, hostnames and protocol.
Scoring: a passed check earns its full weight, a warning half and an error none. How the SEO score works