ssl
now secures the actual connection between your server and the client, but it is
still uncrypted on both the client and server machine.
to
further secure your form data you should use an encryption on whatever medium
you store the data in on the server, and preferably an encryption that can
create a public key to send to the user, and a private key to store data on the
server. (f.eks PGP)
then
comes the problem that your application will have to contain your public and
private key, so now it is very very very important to secure the operating
system and network you run your application on.
mvh
karl
|