Django Site encryption

I am writing a site for which I require all data to be transmitted under encryption.

Last night I was considering encrypting form data before posting it but I've just created a Django form for login and realised that using the action field will send the data back to the server unencrypted.

<form method="post" action="">开发者_C百科
            {% csrf_token %}
            <div id="login_box_user">{{loginForm.userName}}</div>
            <div id="login_box_pass">{{loginForm.password}}</div>
            <div id="login_box_sbmt"><input id="submitbutton" name="submit" value="Login" type="submit" /></div>
        </form>

I'm thinking that in order to get around this, I would need to have a Javascript function as the action to encode it before sending, or a Javascript submit button.

At the same time I'm thinking about SSL but we don't currently have a server running so I wouldn't be able to connect an SSL certificate to it for use during development/testing. The way I understand it, using SSL the data transmitted would be encrypted. I'm wondering if it is worth the effort of encrypting everything, when I plan to get an SSL certificate and using SSL once we have a domain for the site

---

Encryption in JavaScript is useless as explained here. So SSL is your only option.

---

I've found some information here if you plan to deploy your site with https:

http://www.redrobotstudios.com/blog/2009/02/18/securing-django-with-ssl/