Info

Sm728 · 12-23-1999, 01:54 AM

I have a question about the whole pgp/certificate. I am new at this so bear with me. The $100 one time fee is just a fee to set up a cert that you buy separately? If i want to have Credit card orders emailed to me, will a certificate do fine for encryption? Or do i have to get PGP also or is PGP used for extra, extra protection??!

www.scarefactoryinc.com coming soon.....

Sean

Justin · 12-24-1999, 12:04 AM

The SSL certificate allows your site to utilize the SSL layer. This encrypts the data going from the web browser to the server, making it very secure. This does *not* encrypt anything beyond that - it is up to you to use PGP or another encryption method for the "behind the scenes" portion, such as emailing the info to you...

The certificate is simply a way of verifying to the user (and their browser) that your site has been approved by Verisign or Thawte for handling secure transactions, and it technically has nothing to do with the encryption itself... basically it just lets the browser show the lock icon to the user

What you do with the order once you (your scripts) receive it is up to you, though I recommend PGP encrypted email...

Hope this helps.

------------------
Justin Nelson
FutureQuest Support

Sm728 · 12-24-1999, 01:24 AM

Helps out alot!! Thank you...

so for full protection you need a certificate and PGP. Now which program from pgp would be best suited for server secure email? i noticed they had many different PGP programs on their site. And are they hard to set up?

Sean

*Rich* · 12-24-1999, 06:41 PM

For the server side, PGP is already for you to use here at FutureQuest. For information on setting up PGP, see:

http://www.rsmarketing.com/pgp/fq/fqsetup.html

For the client side, you will need to purchase this. NAI and Macafee must have the absolute WORST website on the Net for actually finding or buying anything they offer. This is one of those companies that succeed in spite of themselves.

Try this link:

http://store.mcafee.com/category.asp...3%3A28%3A48+PM

It should work until they move it.

Rich

Sm728 · 12-24-1999, 08:48 PM

hey Rich,
Thanks for answering.. I'll probably order the Mcafee PGP personal privacy software.

One last question (hopefully), Is the SSL $100 to set up plus $125 for the thwarte cert .. or just $100 for everything setup and running?

Sean

*Rich* · 12-24-1999, 10:13 PM

The $100 SSL setup is for the setup of the cert only. In addition you must also purchase the cert (Thawte or Verisign) separately.

Rich

*jelevin* · 12-28-1999, 07:12 PM

If I want to collect info into a form using SSL and then use PGP to e-mail out the data do I need my own cert, or can I use the futurequest shared cert? Rich, your documentation says I need my own cert (or maybe I'm justed confused). Thanks.

*Rich* · 12-29-1999, 01:29 AM

Quote:

If I want to collect info into a form using SSL and then use PGP to e-mail out the data do I need my own cert, or can I use the futurequest shared cert?

At this time, you would need your own private cert. This is due to the fact that the shared certs do not run with sufficient permissions to access the PGP files located within your virtual domain. We are currently working on a solution that would allow PGP to be run under a shared cert. However, at this time, I cannot promise when this solution will become a reality since there are several technical SSL/cert/permission issues that will need to be resolved and implemented. Because of this, PGP Form Mail (and any other PGP usage) requires a private cert.

Rich

[This message has been edited by Rich (edited 12-29-99@01:31 am)]

*jelevin* · 12-29-1999, 11:41 AM

Hmmm, thanks for the speedy reply. Would the answer be any different if I were willing to save the form data to a disk file before e-mailing? I'm just looking to experiment at this point, and for me there is a big difference between $50 and $225-450 out of pocket.

*Rich* · 12-30-1999, 01:16 AM

Quote:

Would the answer be any different if I were willing to save the form data to a disk file before e-mailing?

I'm not too sure what your question is asking. You can't save the data to a disk file because it would not be encrypted which is the whole point of emailing it in the first place. And you can't save it to a disk file encrypted without using PGP which brings us back to the start of this thread discussion.

Rich