Splitting pages between secure and non-secure servers.

Hi all,

Just want to make sure I'm not overlooking anything:

Say there is a page that has CC data entry form - formdata.html
The server script that processes it - processform.asp

While it is obvious that processform should be placed on secure server and action in the formdata.html form should be "https://mysecuresite.com/processform.asp", is there a reason why I would want to have formdata.html on the secure server as well:confused: :confused:

Yes... the first being who would enter credit card info into a form that wasn't on a secure site? :)

Not me.

Good point about human psychology, whammy. And I do accept it it as a valid reson.

However, I would also like to hear about technical reasons. Is it enough to have only the form processing script on the secure server?

Thanks