title: Mechanize submit login form from http to https
body: <p>I have a web page containing a login form which loads via HTTP, but it submits the data via HTTPS. </p>
  
  <p>I'm using python-mechanize to log into this site, but it seems that the data is submitted via HTTP.</p>
  
  <p>My code is looks like this:</p>
  
  <pre><code>import mechanize
  b = mechanize.Browser()
  b.open('http://site.com')
  form = b.forms().next()  # the login form is unnamed...
  print form.action        # prints "https://login.us.site.com"
  form['user'] = "guest"
  form['pass'] = "guest"
  b.form = form
  b.submit()
  </code></pre>
  
  <p>When the form is submitted, the connection is made via HTTP and contains something like:</p>
  
  <pre><code>send: 'POST https://login.us.site.com/ HTTP/1.1\r\nAccept-Encoding: identity\r\nContent-Length: 180\r\nHost: login.us.site.com\r\nContent-Type: application/x-www-form-urlencoded\r\n\r\n'...
  </code></pre>
  
  <p>Can anyone confirm this and eventually post a solution so that the form is submitted via HTTPS?</p>
  
  <p>Later edit: </p>
  
  <p>1) I'm using a HTTP proxy for http/https traffic (set in the environment - Linux machine)<br>
  2) I've watched the traffic with Wireshark and I can confirm that the traffic is sent via normal HTTP (I can see the content of the POST and mechanize doesn't send the same requests to the proxy as a webbrowser - the latter sends CONNECT login.us.site.com:443, while mechanize only POSTs <a href="https://login.us.site.com" rel="nofollow noreferrer">https://login.us.site.com</a>). However, I don't know what happens to the data as it leaves the proxy; perhaps it establishes a ssl connection to the target site? </p>