On Sun, 2003-09-07 at 06:22, Jerry Asher wrote:

> A client wants to store, well you know, credit card data in the database.
>
> Here's what I am thinking of doing, and I'd like your help in making what
> I do actually useful.ave the Subject: field of your email blank.

The problem with what the customer wants is that the password is
instantly exposed if the server should ever get hacked.

Check out my ns_encrypt() module that's in CVS.  It uses all OpenSSL
algorithms, a one time pad, and RSA public/private keys.  The webserver
has the public key and some other remote system would have the private
key.

Daniel
--
Daniel P. Stasinski
Software Engineer
Mayor Pharmaceutical Laboratories
[EMAIL PROTECTED]


--
AOLserver - http://www.aolserver.com/

To Remove yourself from this list, simply send an email to <[EMAIL PROTECTED]> with the
body of "SIGNOFF AOLSERVER" in the email message. You can leave the Subject: field of 
your email blank.

Reply via email to