On 8/13/00, Britta Wingenroth penned:
>I'm building a site that will take credit card information online on SSL but
>send it to the business to be processed by hand. I need for the mail that
>gets sent from the <cfmail> tag to be encrypted. Apparently PGP is
>installed on my ISP, but the SysAdmins don't know how to use it.
>
>I'm thinking of buying the cfx_pgp tag from the allaire site... has anyone
>used it? Any comments? Is it secure just with using the free version of
>PGP6 and this tag? Are there any other products out there that would do the
>same thing for $150?
>
>Thanks for any feedback!
Yep. Pretty easy. I use it to store credit card information in a
database of recurring monthly billing. I tried all kinds of stuff,
cfx_hash, cf_cryption, cf_encryption. Nothing does what it's supposed
to do. This is probably the most secure method anyway.
Here is the tag, subject being the string to encrypt;
<cfx_pgp action="encrypt"
subject="#encryptit#"
keyring="C:\Pgpnt\Keyrings\pubring.pkr"
UserID="[EMAIL PROTECTED]">
Not exactly sure how you would get their public key into the keyring
on the ISPs server, maybe by importing from a public keyserver. I'm a
little new to PGP and have never tried that, but there is also a
parameter "KEYSERVER" that you'd replace KEYRING above with and put a
FQDN to a public keyserver to get the recipient's public key. I would
presume it may be quicker using a keyring right on the server though,
if possible. After running the tag above, you'd just place the
variable #PGPOut# into the cfmail body. You can also specify your own
variable name.
To see a quick demo:
http://www.twcreations.com/pgp/
--
Bud Schneehagen - Tropical Web Creations
_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/_/
ColdFusion Solutions / eCommerce Development
[EMAIL PROTECTED]
http://www.twcreations.com/
954.721.3452
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
