We help IT Professionals succeed at work.

Is this site secure?

rsinden
rsinden asked
on
Medium Priority
320 Views
Last Modified: 2013-12-04
At www.sixt.co.uk they claim that the site is secure and yet it is not an https site. The specific page can be found by clicking 'van rental', choose any location and date for delivery, click next, click on any vehicle, click next, ignore the options on the next page, click next and this should bring you to the reservation page where you have to enter your credit card details. The small print claims that the data is sent via SSL but how?
Comment
Watch Question

Rich RumbleSecurity Samurai
CERTIFIED EXPERT
Top Expert 2006

Commented:
You can send data via SSL, while the page itself may not be recieved via ssl. You sometimes get warnings from your browser to "display both secure and non-secure items"
That message typically occurs in reverse however, the page is served via httpS and there are plain http items as well. You can consider the data sent via ssl secured, however it's a better practice to make the entire page https, not just the CC transaction field.
http://www.hostmysite.com/support/miva5/nonsecure/
I don't think your browser prompts you when the page is served http, and parts are ssl... I'm not sure.
-rich
Top Expert 2007
Commented:
Yes, this form is secure.

The page itself is sent via HTTP but the form is submitted via HTTPS as evidenced by the ACTION tag in the page source:
<form action="https://www.e-sixt.co.uk/cgi-perl/rental/or" method="post" name="resform">

Since the SSL encryption is negotiated before any data is sent to the server the transmission from the page to the server will be encrypted.

Dave Dietz

Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts
Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.

OR

Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.