Re: protecting ccard numbers

2002-12-02 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Bernd, et al -- ...and then Bernd Prager said... % % Well, IMHO there's only one way to make it almost secure: % Don't store the cc numbers unencrypted. Agreed there; it seems to me that they would have to be encrypted at least somewhat. % The use

Re: protecting ccard numbers

2002-12-02 Thread Bernd Prager
Well, IMHO there's only one way to make it almost secure: Don't store the cc numbers unencrypted. The user should log-in with a password. Don't store the password, just a hash-value to proof the password valid. Encode and store the sensitive data with that password. Use a second password (don't s

Re: protecting ccard numbers

2002-12-02 Thread David T-G
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 William -- ...and then William R. Mussatto said... % % On Sun, 1 Dec 2002, David T-G wrote: % % > Date: Sun, 1 Dec 2002 18:42:03 -0500 % > From: David T-G <[EMAIL PROTECTED]> % > To: mysql users <[EMAIL PROTECTED]> % > Subject: protecting ccard numb

Re: protecting ccard numbers

2002-12-02 Thread William R. Mussatto
On Sun, 1 Dec 2002, David T-G wrote: > Date: Sun, 1 Dec 2002 18:42:03 -0500 > From: David T-G <[EMAIL PROTECTED]> > To: mysql users <[EMAIL PROTECTED]> > Subject: protecting ccard numbers > One way would be to encode the credit card number field using data from an external file for the key and t