Solved

Secure data being sent via website through email...

Posted on 2011-09-20
3
343 Views
Last Modified: 2012-05-12
I'm doing a website that allows for someone to submit forms online - but one of the questions asks for a Social Security Number. I secured the website with an SSL and the form results are going to a SQL database AND a copy is being send to the website owner via email so they can view and print everything out.

Seems simple enough, right? But their office networking guy is having a fit because he says that sending a copy of the form results via email is dangerous regardless of whether or not everything is secure because emails themselves are not secure. I see his point, but is it enough of a problem for anyone to worry about? What other option is there? Doesn't everyone use the email method?
0
Comment
Question by:orlandotommy
  • 2
3 Comments
 
LVL 83

Accepted Solution

by:
Dave Baldwin earned 500 total points
ID: 36569119
In situations requiring HIPAA compliance (for example) all communications including email must be sent thru encrypted channels.  Plain text email is not allowed and in fact is against the law in a HIPAA environment.  So, yes, some people take it quite seriously.
0
 

Author Comment

by:orlandotommy
ID: 36569344
How would email be sent through an encrypted channel?
0
 
LVL 83

Expert Comment

by:Dave Baldwin
ID: 36569678
There are ports for encrypted email.  If you have a Yahoo or AT&T account, they try to get you to use them.  Google too and here's the Google info: http://mail.google.com/support/bin/answer.py?answer=13287  I believe PHP and ASP.NET both have ways to use SSL email.
0

Featured Post

What is SQL Server and how does it work?

The purpose of this paper is to provide you background on SQL Server. It’s your self-study guide for learning fundamentals. It includes both the history of SQL and its technical basics. Concepts and definitions will form the solid foundation of your future DBA expertise.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A phishing scam that claims a recipient’s credit card details have been “suspended” is the latest trend in spoof emails.
Preparing an email is something we should all take special care with – especially when the email is for somebody you may not know very well. The pressures of everyday working life stacked with a hectic office environment can make this a real challen…
This tutorial walks through the best practices in adding a local business to Google Maps including how to properly search for duplicates, marker placement, and inputing business details. Login to your Google Account, then search for "Google Mapmaker…
Any person in technology especially those working for big companies should at least know about the basics of web accessibility. Believe it or not there are even laws in place that require businesses to provide such means for the disabled and aging p…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question