New posts in Web2Lead

Is web to lead form data submits in encrypted form?

Can web-to-lead be protected from spammers without additional server side processing?

Can an attachment be sent from a web2lead form into Salesforce lead?