Fix today

A form on your site sends what people type insecurely

This is the exact wording EverThread uses when it finds this on a customer's site, written for someone who runs a business, not a server. The example site here is yourbakery.com.

What we saw

A form submits to http://yourbakery.com/contact over plain http.

Why it matters

Whatever people type into it can be read on the way. If it is a password, that is a breach waiting to happen.

How to fix it

Send the address below to your developer. The form's destination needs to be https.

For your developer