[ic] Dumb security question

cfm@maine.com cfm@maine.com
Fri, 30 Mar 2001 17:50:24 -0500

On Fri, Mar 30, 2001 at 08:52:22PM +0100, Jonathan Melhuish wrote:
> I'd be interested in knowing how to set up a system like this, too.  I want to
> be able to just send a confirmation email to my sales rep, who will then log
> in via a secure connection to retrieve credit card details.
> I know linux is supposed to be secure, and that any file with the permissions
> set correctly should only be visible to authorised users, but would it not be
> sensible to encrypt the data, just in case?  The data should also be deleted
> automatically once the rep has retrieved it.
> Does IC have this facility?  I would have thought it would be a fairly
> standard setup.  Has anybody found a way to implement it?

Seems to me that if one does not know **how** to do it you run a high
risk of missing something.  You certainly cannot leave things on the
floor just because linux is supposed to be secure.  It gives you all
the rope you need to hang yourself any number of ways.

The **easiest** way to go is standard interchange, eg put pgp on 
the machine or pay someone who can rather than trying to implement 
a workaround.  That is the safest too, until you learn how to otherwise.


> Cheers
> Jon
> Jim wrote:
> > I've been through the archives, and didn't see an answer and being new
> > some things, wonder:
> >
> > I have a web site with access to a secure server (https://yadda...).
> > I do not have PGP here or on the server.
> > I need the order info emailed or, can a salesrep login and access sales
> > info, including credit card info without PGP? I.E., will credit card
> > data stored on server (encrypted I assume) be de-cypted when authorized
> > user accesses data?
> > Lastly, I noted (in the archives) a problem between IE and secure
> > servers and IC
> > (http://lists.akopia.com/pipermail/interchange-users/2001-March/005263.html
> > ). Has this been corrected?
> >
> > Jim
> >
> > _______________________________________________
> > Interchange-users mailing list
> > Interchange-users@lists.akopia.com
> > http://lists.akopia.com/mailman/listinfo/interchange-users
> _______________________________________________
> Interchange-users mailing list
> Interchange-users@lists.akopia.com
> http://lists.akopia.com/mailman/listinfo/interchange-users


Christopher F. Miller, Publisher                             cfm@maine.com
MaineStreet Communications, Inc         208 Portland Road, Gray, ME  04039
1.207.657.5078                                       http://www.maine.com/
Content management, electronic commerce, internet integration, Debian linux