Do not leave the form without the lock

If a name, a phone and a note travel on an unlocked path, the path stays open.

Let the contact form sit only on an https page. A card is never asked for on this form.

What it is for A certificate works for the domain it was written for. It does not clip onto another name. A subdomain must be named on the certificate too.

How it sits SSL is the lock in the browser. The address opens with https. On a page without the lock the visitor sees a warning and leaves the form.

Where it breaks Do not leave the form without the lock. The certificate closes the path between you and the visitor. It does not store the card number with you. The payment page is separate.

What to do A certificate binds to the domain it was written for. Payment ends on the Stripe page. The card number does not sit on this site.