I'm doing a website that allows for someone to submit forms online - but one of the questions asks for a Social Security Number. I secured the website with an SSL and the form results are going to a SQL database AND a copy is being send to the website owner via email so they can view and print everything out.
Seems simple enough, right? But their office networking guy is having a fit because he says that sending a copy of the form results via email is dangerous regardless of whether or not everything is secure because emails themselves are not secure. I see his point, but is it enough of a problem for anyone to worry about? What other option is there? Doesn't everyone use the email method?