FAQ: How To get your Dathorn hosted site SSL certified

[Jonathan]

Should the action for the form be https://www.domain.com/cg-bin/form.pl ???

I would believe so

[Pedja]

I was wndering if you have a form on your site, you install your ssl cert and put your form at https://www.domain.com/form.html

Now your form gets processed by a script in your cgi-bin and sent to your email.

Is the information encrypted if sent through the cgi-bin???

It is not clear to me what you ask exactylu but iof your question is will data sent to you by email be encrypted, the answer is no.

SSL encrypts connection. It is liek formina pipe through which you communicate. encritpion covers your data only while it is within a pipe.

So, if you use mail form through SSL, anything you type and send to mail form will be encripted while it travels through net from yor computer to hostign server. When it gets there, it is decrypted and delivered to the mail form script.

[halyfax]

It is not clear to me what you ask exactylu but iof your question is will data sent to you by email be encrypted, the answer is no.

SSL encrypts connection. It is liek formina pipe through which you communicate. encritpion covers your data only while it is within a pipe.

So, if you use mail form through SSL, anything you type and send to mail form will be encripted while it travels through net from yor computer to hostign server. When it gets there, it is decrypted and delivered to the mail form script.

That is exactly it. If this is the case (email of form will not be encrypted) can anyone suggest a simple, simple way of getting secure credit card info to a end user. Does it mean it has to be stored in a database on the server and the user has to go in and get it? I need something simple, the end user needs to get the credit card info. No payment process/merchant account needed, they do all that by hand. They just need to ge the card number and basic registration info (name date, contact info etc).

p.

[-Oz-]

i would bet the best way would be to store the credit card numbers in the database but that isn't too secure, you'd have to encrypt and decrypt them, which is very hard. Databases can and do get broken into all the time.

[paulC]

That is exactly it. If this is the case (email of form will not be encrypted) can anyone suggest a simple, simple way of getting secure credit card info to a end user. Does it mean it has to be stored in a database on the server and the user has to go in and get it? I need something simple, the end user needs to get the credit card info. No payment process/merchant account needed, they do all that by hand. They just need to ge the card number and basic registration info (name date, contact info etc).

p.

I'm in a similar situation - we just needed to get the card info. What I do is split the card number in two, store half in the database (encrypted), and send the other half by email to our office. Then the staff can login to a page on the secure server and get the other half of the credit card number, deleting it from the database once they have finished. Seems to work well.