[wdvltalk] Securing web traffic

2008-01-14 Thread Ross Clutterbuck
Hi list There's always something new to learn and this is the first time I've really needed to secure a web session in a client project, and I'm after a few pointers if I may... Fundamentally, the project is an online questionnaire which stores responses in a back-end database. That database can

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
I don't know about the UK but in the US if there is any health information whatsoever your security measures must include SSL and encryption of the database. Cheryl D Wise MS MVP Expression - Author: Foundations of Microsoft Expression Web Win the full Expression Studio - see contest rules

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Ross Clutterbuck
This is what I thought Cheryl, but the main thing I'm after really is pointers on how to do it. Is it just a case of programming my PHP + MySQL app as normal but providing HTTPS addresses to my domain and having an SSL certificate? Is it more complex than that? MOU • The WDVL Discussion

RE: [wdvltalk] Securing web traffic

2008-01-14 Thread Cheryl D Wise
SSL is the first bit as long as you make sure that every page that could possibly access the info is forced through the SSL But encrypting the database is out of my area. I had someone else do it on the HPPA (Healthcare Patient Privacy Act) when I did one. Cheryl D Wise MS MVP Expression -