HTTPS for form pages?

[joberts]

I am creating a small business website for a friend in Recruitment. It’s very small and mainly just a shop window for the business. There’s no login area for the website, but there are two areas were users can enter information:

• General contact us form (giving email and phone number)
• Applying for a job (attaching a resume)

The forms are using Ninja Forms – which I believe are secure in passing information. But am I missing anything? Do I need to make these pages https at all? I’m quite new to building sites from scratch.

Thanks for your help

[Martijn_Scheijbeler]

Hi John,

You can 'just' make your forms HTTPS proof. Read yourself into what HTTPS really can help you with, it's basically an SSL certificate which makes it possible to send the information in a secure way to the end point. This will keep the data of the users more secure while sending along private information. Usually when setting up a new site you could see it as a separate thing to enable HTTPS on your whole domain or not.

Martijn.

[TimHolmes]

As per Martijn you could indeed just secure the areas you want, but personally I would suggest adding the SSL to the entire site encompassing all pages. That way you can potentially get a small boost for your site from Google for taking users security seriously, but also if you have the ability you could also adopt the http/2 transfer protocol to allow for a speedier connection to your friends site, again giving them a potential serp boost.

[joberts]

Thank you both.

As it happens, just now I discovered the site is already covered with a basic SSL certificate through my host. However, the secure version of the site doesn't load properly - the CSS is being loaded over http, so I need to fix that in wp-admin. Just leaving this here in case it ever helps anybody else!

http://stackoverflow.com/questions/27727003/website-homepage-loses-styling-when-ssl-forced