| 1) I need to accept credit cards on my site
- how do I do this securely?
This is accomplished with SSL - Netscape Secure Sockets Layer, which will
allow you to collect your customer's credit card information via a secured
order form. These are the costs:
https://www.yourdomain.com/ for $120 setup, $15/month
You will also need to purchase a digital certificate ($135 from
Thawte or from
Verisign for $349)
Please note that these costs don't include your merchant account or processing
software or terminal (you may already have these things), or shopping cart
software, which is available for an additional cost Nor does this include
"Real Time" processing, which is necessary if you would like to sell software
or another product which is delivered immediately upon approval of the
customer's charge online. For additional information on "Real Time" processing,
contact support.
You can setup your own shopping cart software, or you can hire NewCreations
to design and implement your shopping site. Shopping cart setup costs are
as follows:
Javascript Shopping Cart - 15 items on 3 product pages - $95.00
Additional Product Pages (5 items each) - $25.00 (includes scanning of product
photos)
Follow this link
for more detailed information on shopping cart setup
2) How secure is a secure
server?
The best answer to this question is best found in an interesting article
from a guy who broke a part of the SSL Algorithm. It took 120 dedicated machines
and 15 days.
http://pauillac.inria.fr/~doligez/ssl/press-conf.html
The question:
If you were setting up a Web site, would you buy the SSL, knowing now what
is possible?
His comment:
It depends on what kind of information would go through this Web site. It
has been pointed out that Netscape Navigator is still quite safe for credit
card numbers, but for really confidential information (like a password that
gives access to a bank account, or a stock broker taking orders via the Web),
I wouldn't.
3) Where can I find out more about
SSL?
http://www.zdnet.com/pcmag/issues/1508/pcmg0076.htm
http://www.apacheweek.com/features/ssl
http://webopedia.internet.com/TERM/S/SSL.html
http://www.consensus.com/security/ssl-talk-faq.html
Email
if your question is not answered here.
|