Re: [cobalt-security] Credit cards

[Gerald Waugh <gwaugh@xxxxxxxxxxxxxxxxxxxxxxx>]

On Tuesday 14 May 2002 07:40 am, duncan gray wrote:
> Hey,
> Here a quick question, I work for a company that
> basically has a shop and does CC processing on a
> regular basis, via the machine they have, they also
> have authorisation to take CC payments over the phone,
> e.g. card holder not present.  Instead of using a
> company like secure trading, or something along those
> lines, What exactly is needed to take credit card
> details store them then access them and process them
> manually as if the card holder wasnt present on the
> machine that we have.
>
> I'm guessing that you would need something along this
> line.
>
> A SSL certificate for encrypting server - client
> communication.
> Encrypted DB.
> A firewall.

I have clients that have a similar situation for credit card processing
They use a form on an SSL site and email the form using gnupg
Seems to work well

-- 
Gerald Waugh 
http://www.frontstreetnetworks.com :: Phone. [011] 203.785.0699
Front Street Networks LLC | SOHO Networks & Web Site Hosting
229 Front Street, Ste. #C, New Haven, CT, 06513-3203 United States