Sealing the envelope

 
Gadgets

Authentication
Crypto
ENV
HTTP
Regex
Regex 2
Robots
Snarfs
SSL
Stepper

Sometimes your customers or Web site visitors send you sensitive information, whether it's a credit card number, Social Security number or their email address. You confidently and efficiently secure the communication using an SSL connection.

But SSL only protects the information from the user's browser to the Web server. What then? If you save the information on the server, or send it to an email account, you've in effect passed that same information back onto the 'Net in unprotected, clear text.

The answer is to seal the envelope on the communication using some form of public key cryptography. PGP (Pretty Good Privacy) or GnuPG (Gnu Privacy Guard) are ideal for this. Once encrypted, you can save the data on the server or mail it to yourself in confidence that the bad guys will have a very tough time indeed cracking your crypto.

In this gadget, I'll show you how to securely encrypt form data using Perl and either PGP or GnuPG, and how to programmatically decrypt a whole batch of data using Perl and GnuPG.

  Next >>






Home | Gadgets | Code | Links | Reads | Contact

Copyright © 1999, 2001, 2002 by John H. Byrd
All rights reserved.