We have an interesting predicament.

We have a domain https://securedomain.com [1], inside which sits a form
that needs to submit to https://subdomain.evenmoresecuredomain.com [2].

Note that...