Go Premium for a chance to win a PS4. Enter to Win

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 370
  • Last Modified:

Secure data being sent via website through email...

I'm doing a website that allows for someone to submit forms online - but one of the questions asks for a Social Security Number. I secured the website with an SSL and the form results are going to a SQL database AND a copy is being send to the website owner via email so they can view and print everything out.

Seems simple enough, right? But their office networking guy is having a fit because he says that sending a copy of the form results via email is dangerous regardless of whether or not everything is secure because emails themselves are not secure. I see his point, but is it enough of a problem for anyone to worry about? What other option is there? Doesn't everyone use the email method?
0
orlandotommy
Asked:
orlandotommy
  • 2
1 Solution
 
Dave BaldwinFixer of ProblemsCommented:
In situations requiring HIPAA compliance (for example) all communications including email must be sent thru encrypted channels.  Plain text email is not allowed and in fact is against the law in a HIPAA environment.  So, yes, some people take it quite seriously.
0
 
orlandotommyAuthor Commented:
How would email be sent through an encrypted channel?
0
 
Dave BaldwinFixer of ProblemsCommented:
There are ports for encrypted email.  If you have a Yahoo or AT&T account, they try to get you to use them.  Google too and here's the Google info: http://mail.google.com/support/bin/answer.py?answer=13287  I believe PHP and ASP.NET both have ways to use SSL email.
0

Featured Post

What does it mean to be "Always On"?

Is your cloud always on? With an Always On cloud you won't have to worry about downtime for maintenance or software application code updates, ensuring that your bottom line isn't affected.

  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now