How safe can it be

[BigMag]

Hello,

I was wondering how safe an ASP can be, when using encryption.

How can I encrypt on a thin client (data goes encrypted over the line)? Or is a SSL enough together with encryption on the server (data goes not encrypted over the line)?

All suggestions welcome!!


Thanks in advance,

M.

BigMag, The Netherlands.
someone@euronet.nl (no kidding!)

 

[dilettante]

SSL traffic is encrypted. Be sure to require 128-bit client support.

To go beyond this would require a client-side encryption engine, of course.

 

[ToddWW]

If you are working on your own web server, see

http://www.versign.com

for 128 bit certificates that are already trusted by most browsers. You can alternatively create your own certificate in IIS but will require the visitor's permission before they can enter the site. If your application is hosted, just ask your host for 128 bit encryption.

So, unless you're writing a web site that needs more encryption than that which is used by 95% of all of the financial institutions in the world, 128 bit SSL will do just fine.

TW