Copy link to clipboard
Copied
form is not secure and autofill is turned off.. only in crome??? Fix??
Copy link to clipboard
Copied
Don't use crome
Copy link to clipboard
Copied
As a Community expert this is not really called for. You should at least provide some context if you do not recomend chrome, suggest others for example like Brave and explain to the person asking for help.
Copy link to clipboard
Copied
Well the OP said, it only happens in crome [sic]. 😁
PATIENT: Doctor, doctor, it hurts when I do this...
DOCTOR: Then stop doing that.
Copy link to clipboard
Copied
Why is your form not secure? Are you missing an SSL certificate? Contact your host.
Copy link to clipboard
Copied
yes i have ssl cert
Copy link to clipboard
Copied
What's the URL to your site where you're seeing this problem?
Copy link to clipboard
Copied
fundstome.com
I have ssl cert
Copy link to clipboard
Copied
As others have you said, your form is not secure. DO NOT USE.
It's irresponsible to transmit sensitive data by email and expect it to be protected.
If you can't code, and I suspect you can't, use a secure form from a 3rd party service like Wufoo or JotForm.
Copy link to clipboard
Copied
I must also mention that if you collect data from people, you need a written privacy policy statement on your website. You must explain what data is collected, how it is used. If you share data, how is that data used by 3rd parties. Other regional and business laws may apply. Please consult your legal expert for more details.
Copy link to clipboard
Copied
Rules and regulations differ per country of operation as a note.
Copy link to clipboard
Copied
Not talking about rules and regulations. Talking about security.
For starters, this is a spam bot's breakfast, lunch and dinner.
<p><a href="mailto:info@fundstome.com">Info@fundstoyou.com</a><br>
Secondly, name me an email protocol that cannot be intercepted. As one blogger puts it:
Email might feel like a private, one-to-one conversation safe from prying eyes, but email is about as confidential as whispering at the White House. Your messages can be intercepted and read anywhere in transit, or reconstructed and read off of backup devices, for a potentially infinite period of time.
Copy link to clipboard
Copied
You are asking people to email personal details. This is most irresponsible. Thank goodness for Chrome for pointing this out.
It angers me, the fact that cowboys are allowed to develop websites with this type of insecurity.
The only way to handle personal information is to process the form on a secure server.
Copy link to clipboard
Copied
You are asking people to email personal details. This is most irresponsible. Thank goodness for Chrome for pointing this out.
It angers me, the fact that cowboys are allowed to develop websites with this type of insecurity.
The only way to handle personal information is to process the form on a secure server.
By @BenPleysier
That's actually a really cool feature. I wish all browsers had this.
Copy link to clipboard
Copied
This is really nonsensical. Of course you can do this and of course it is not irresponsible.
In terms of the site and business - They will not get it, it is obvious but if its been setup, it has secure or someone has a site repitable and has a service then there is no problem filling in forms with personal details.
Copy link to clipboard
Copied
there is no problem filling in forms with personal details.
By @Liam Dilley
Correct, but do not use an email to convey those personal details.
Copy link to clipboard
Copied
@Sniperssite wrote:form is not secure and autofill is turned off.. only in crome??? Fix??
This is to do with trying to process your form in an unsecure way by using an email address in the forms 'action' field - 'mailto:https://XnfX@fXndXtoXe.Xom' (Ive X'd the email to stop spam)
You should use a server side process such as php/node to process the form.
It looks like your actual website is protected by a SSL certificate.
Copy link to clipboard
Copied
It looks like your actual website is protected by a SSL certificate.
By @osgood_
========
Protected is a relative term. How much encryption and insurance does one get from a zero-cost, 90-day ACME certificate? I mean something is better than nothing. But I wouldn't run a business on this.
Copy link to clipboard
Copied
It looks like your actual website is protected by a SSL certificate.
By @osgood_========
Protected is a relative term. How much encryption and insurance does one get from a zero-cost, 90-day ACME certificate? I mean something is better than nothing. But I wouldn't run a business on this.
By @Nancy OShea
There is nothing wrong with free certificates for websites which just request general information such as name, email, enquiry.
If its more sensitive information such as medical records anything to do with finance etc then one should invest in an upgrade SSL certificate.
Personally l think the need for a SSL certificate for low grade information is bonkers anyway. We all share that kind of information liberally anyway in profile's and directories which can be found all over the Internet.
Copy link to clipboard
Copied
LetsEncrpt for example is 100%. To say a free or zero cost is not as valid as a $100 a month one purely on the price is not a valid statement to make. Reputation, actual features and other factors are actual important things.
Copy link to clipboard
Copied
Tell that to my bank and they will laugh at you. Just saying....
My merchant bank performs PCI compliance checks every 3 months. If my site doesn't pass, I don't get paid. Simple as that.
If you're not a merchant, zero cost ACME certs that provide no insurance and only low-level encryption are probably "good enough." But real business owners know that that "good enough" is not good enough for the banking industry.
I don't pay a lot for multiple certs. I think it works out to about $20/year per domain, more if you only buy certs for 1 year at a time.
There are deals to be had from Namecheap.com and other brokers. If you buy certs from your hosting provider, be prepared to pay much more. Hosts charge higher prices because they can, not because they should.
Copy link to clipboard
Copied
Firstly I have to say I am sorry for the comments here and especially from some Adobe Profesionals. The comments have been quite attacking on the site and what your doing and while your initial post was way too short after you posted your link I do not think many of the comments are called for.
In terms of providing actual information for you while outside of the DW thread base but valid web based....
Chrome introduced the feature to help protect users and the warning for sites and forms was forced in October of last year. It can be for many reasons - NOT JUST FOR what people have said here and you can google a list of those.
You have an SSL but the form post action is not set correctly. Mailto needs an email and sending that information from a form via email has 2 main problems.
1. Security
2. Size - You would not recieve all emails due to the attachments.
Trying to start a new business or step into the web to expand a business is challenging and initially costly. In saying that though the site will not attract many people or entice anyone to fill in those forms regardless of the security. It does not look like a modern website, inviting or something people would trust.
You should look to use a form service or save to server securly or just something like JotForms to get that data sent and stored safely.
Check with what legal requirements for your business and country in terms of what you are doing to ensure you have things like privacy policies and data safety all in place.
But there are many website building tools and services you can use that are low cost that would give you SSL's, secure forms and a more enticing website so it is worth looking into those.
Copy link to clipboard
Copied
Firstly I have to say I am sorry for the comments here and especially from some Adobe Profesionals. The comments have been quite attacking on the site and what your doing and while your initial post was way too short after you posted your link I do not think many of the comments are called for.
In terms of providing actual information for you while outside of the DW thread base but valid web based....
Chrome introduced the feature to help protect users and the warning for sites and forms was forced in October of last year. It can be for many reasons - NOT JUST FOR what people have said here and you can google a list of those.
You have an SSL but the form post action is not set correctly. Mailto needs an email and sending that information from a form via email has 2 main problems.1. Security
2. Size - You would not recieve all emails due to the attachments.
Trying to start a new business or step into the web to expand a business is challenging and initially costly. In saying that though the site will not attract many people or entice anyone to fill in those forms regardless of the security. It does not look like a modern website, inviting or something people would trust.
You should look to use a form service or save to server securly or just something like JotForms to get that data sent and stored safely.
Check with what legal requirements for your business and country in terms of what you are doing to ensure you have things like privacy policies and data safety all in place.
But there are many website building tools and services you can use that are low cost that would give you SSL's, secure forms and a more enticing website so it is worth looking into those.
By @Liam Dilley
What is different to what you are saying here and what I have been saying regarding emailing personal informattion. I do not apologise for making the statement under the name of security. At least I did not criticise the website.