Re: [Zope] Re: [ZCommerce] Secure storage of credit card info

2000-06-12 Thread Ng Pheng Siong
On Sat, Jun 10, 2000 at 07:58:48AM +1300, Graham Chiu wrote: > >http://www.post1.com/home/ngps/zope/zsmime > > Any ETA on the Win32 binaries? Real Soon Now! ;-) Seriously, I've just compiled M2Crypto with Borland's BC++ 5.5 free compiler suite and linked with MSVC-built Python and OpenSSL.

Re: [Zope] Re: [ZCommerce] Secure storage of credit card info

2000-06-09 Thread Steve Spicklemire
> "RDM" == R David Murray <[EMAIL PROTECTED]> writes: RDM> On Thu, 8 Jun 2000, Bill Anderson wrote: >> Personally, I would store the actual data on a seperate server, >> not accessible to the public. RDM> Mmm. Yes, that makes it more secure. Still leaves the RDM> quest

Re: [Zope] Re: [ZCommerce] Secure storage of credit card info

2000-06-09 Thread Cary O'Brien
> -> > You have a ZCommerce site. You accept credit cards, and securely > -> > communicate with a CC processor to verify the transacton. Now, > > Besides Bill's suggestion, keep all your servers behind a good > firewall. One option is to use Linux IP Masquerading, having your > webserver

Re: [Zope] Re: [ZCommerce] Secure storage of credit card info

2000-06-08 Thread Derek Simkowiak
-> I'd like to also have a one-box solution, though. Ooh, that's bad JuJu. Keeping CC#s on the same box as your webserver? a) Pray there are no overflows/misconfigurations/etc. on the webserver daemon. b) Turn off EVERY other service on that box (even ssh has had a buffer overflow).

Re: [Zope] Re: [ZCommerce] Secure storage of credit card info

2000-06-08 Thread R. David Murray
On Thu, 8 Jun 2000, Bill Anderson wrote: > Personally, I would store the actual data on a seperate server, not > accessible to the public. Mmm. Yes, that makes it more secure. Still leaves the question of encryption/decryption of the data and key management, but it makes the cracking a lot less