[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: [cobalt-developers] PGP installation and config with SSL



On Mon, Mar 06, 2000 at 10:36:45AM -0500, Robert Spurlock wrote:
> I believe you have it right the second time.  The message will be sent to
> the person paying me to host the site.  The visitor will be putting Credit
> card info into the form which will be transmitted via e-mail to the
> magazine.  I want to send it securely to the magazine via e-mail.  They
> don't want it displayed, just e-mailed.  If pgp or whatever is needed, what
> would i get for a Linux box to do this without breaking the bank?

Three-Four options I can think of from the top of my head:

1)	Wait for MIME-Tools or another object module for Perl or
	similuar scripting language to have support for S/MIME
	and send to your clients using their public X509 signatures.
	(( Neat for anyone using Outlook Express 5 or Outlook 2000
	   as I think they can automate the decryption process on their
	   end ))

2)	Use PGP.

3)	Use GnuGP -- no patent worries to pay for and conforms to OpenPGP
		http://www.gnupg.org

4)	Select another type of encryption, say Triple-Des, Blowfish, etc
	that you communicate w/ the client -- although as these are
	symmetric algorythims -- care would have to be taken to keep
	the key files outside accessible web space.

-- 
Robert G. Fisher		     NEOCOM Microspecialists Inc. 
System Administrator/Programmer      (540) 666-9533 x 116