title: Is it secure to submit from a HTTP form to HTTPS?
body: <p>Is it acceptable to submit from an http form through https?  It seems like it should be secure, but it allows for a man in the middle attack (<a href="http://ask.metafilter.com/48531/are-http-forms-posted-thru-https-secure" rel="noreferrer">here is a good discussion</a>).  There are sites like <a href="http://www.mint.com" rel="noreferrer">mint.com</a> that allow you to sign-in from an http page but does an https post.  In my site, the request is to have an http landing page but be able to login securely.  Is it not worth the possible security risk and should I just make all users go to a secure page to login (or make the landing page secure)?</p>