Re: Crypted fields



Thank you for your advise. I did check on the server I use for my internet
site and it seems that they do that. I will contact them next week

Cost 130euro to instal it and 15 euro per month which is quit good I think
regards to all
Your favorit bookseller
claude
"Sam Remek" <sam@xxxxxxxxxx> a écrit dans le message de news:
4419d5b4$1@xxxxxxxxxxxxxxxxxxxxxxxxx
Claude Lec wrote:

hI
D7 + perl

As a bookseller I have a internet site with form to order books. I
generate
those forms direct from my software
I have a script in perl which send a email with the filled fields
I have a field where people can give there visa number.
Now it is not crypted. It is to expensive for me to get through the bank
to have those calles secure system.
Is there a way in perl or in delphi to put in each form a small program
to crypte this number with a public key
or another way to do it?
Thanks
claude
Claude,
If I understand you correctly, you have a web form where the user enters
the order and when they press Submit, it sends you an email with the order
information?

If that is the case, then you need to do 2 things.

1) You need to make sure your order form is using SSL at the browser
level. (Is the padlock locked in the browser status bar?) If you don't
have SSL, then the transmission of the order can be intercepted before it
reaches your email server. You can get SSL certificate from Thawte or
GoDaddy etc and your ISP needs to install it on your webserver. It costs
around $50-$100 for 2 years.

2) You also need to encrypt the data when it reaches your email server.
Otherwise someone who gains access to the emails as they sit on the server
can read your orders. (SSL only protects the transmission of the data, not
the storage of the data). We use PGP on the webserver to encrypt the data
(your ISP needs to have it installed), and then when the email reaches our
computer in our office, we have to open the email using PGP client.

This ensures the data is always encrypted, from the user's machine using
SSL, to the webserver, and finally on your machine. If someone steals your
computer that has the email, it is still encrypted (using PGP).

Sam


.



Relevant Pages

  • RE: Problems accessing SSL encrypted webpages in SBS 2003
    ... RWW from Internet via SSL. ... Please open Server Management console, navigate to 'To Do List' and click ... 'Connect to the internet' in the right panel. ... recommended to use the wizard to configure the SBS server. ...
    (microsoft.public.windows.server.sbs)
  • Re: HTTPS-HTTPS web publishing
    ... After a couple of tweaks to publishing rules ... the sbs company web, owa, portal server, and project server are working over ... > Here's an article that deals with exporting the SSL cert from your web ... >> access the internet fine. ...
    (microsoft.public.isa)
  • RE: SSL Publishing to WEB Server and Disable Binding
    ... To answer your concern, you can feel to publish this SSL web site, and the ... Socket pooling causes Internet Information Services ... pooling won't impact the default web site on the SBS server. ...
    (microsoft.public.windows.server.sbs)
  • Re: SSL Problem! weird - URGENT !
    ... >>Cannot find server or DNS Error ... >>Internet Explorer ... >>> and my website is on root dirctory and i checked the ssl ...
    (microsoft.public.inetserver.iis.security)
  • Re: HTTPS-HTTPS web publishing
    ... server and importing it in ISA for a SSL / SSL bridging scenario which I ... > access the internet fine. ...
    (microsoft.public.isa)