[1197] in WWW Security List Archive

home help back first fref pref prev next nref lref last post

Re: Netscape's little key icon

daemon@ATHENA.MIT.EDU (P.J. Stafford)
Mon Nov 27 22:50:52 1995

Date: Mon, 27 Nov 1995 19:12:41 -0500 (EST)
To: www-security@ns2.rutgers.edu
From: pj@netfactory.com (P.J. Stafford)
Errors-To: owner-www-security@ns2.rutgers.edu

>I see that little key icon in the bottom left corner of the screen.  I'm
>told that when it's a solid key with teethies, that means you're talking
>to a "secure server" (if that phrase has any meaning outside of marketing
>materials).


I've got a follow up question:  If an order is taken on a "secure" form, but
the results of the order form are send automatically to the clients email
address (say, on AOL), isnt the credit card # flying thought the Net in a
clear email ? The only thing that appears to be secure is the shoppers
interaction with the server, but when the server sends the order outside the
machine to the person who receives the order, the credit card is "unsecure".

Do I have this right ?  If yes, is the only solution for the server to send
a PGP encoded mail message to the person who receives the orders ?


============================================================================
P.J. Stafford The Internet Factory, Inc., Birmingham, Michigan
Infobots:    info@netfactory.com	jobs@netfactory.com 
On the Web:  http://www.netfactory.com/   We are Electronic Commerce
Specialists,
 enabling businesses to publish and sell on the World-Wide Web.
                            *************
"I see no reason why intelligence might not be instantaneously transmitted
by electricity to any distance"  Samuel F.B. Morse  1832
=============================================================================


home help back first fref pref prev next nref lref last post