WHAT IS A SECURE SERVER?

A secure server is one which takes advantage of Secure Sockets Layer (SSL) technology. SSL is a protocol designed to enable secure transmission of information on the Internet. SSL provides encryption and integrity of communications along with strong authentication using digital certificates. SSL uses a private key to encrypt data being submitted from a browser before it is transferred over the Internet via the SSL connection. When the data reaches the SSL-enabled web server, it is decrypted. If the data were to be stolen during this transmission, it would remain unreadable. Many web sites use SSL to obtain confidential user information, such as credit card numbers. Web pages that incorporate SSL have a web address starting with "https://" instead of the usual "http://".

SSL IS NOT ENOUGH

One of the major misconceptions regarding Internet security is that information submitted to a server using SSL will always remain encrypted and secure. This is not true. A secure (SSL) server alone does nothing to protect the data after it is received by the server. SSL creates a secure path between the user's browser and the SSL-enabled server. However, the information is only secure during the time that it is being transmitted from the browser to the server. Once the information reaches the server, the information is decrypted and SSL has no effect. If there is no further encryption taking place once the information reaches the server, the security of the information is compromised.

OUR SECURITY – BEYOND SSL

Our transaction processor takes advantage of advanced security and encryption features to ensure the security and safety of customer data. After customer data (credit card number or checking account number) arrives at our tranaction processor server via SSL, it is re-encrypted using PGP (RSA algorithm), which makes the information unreadable. This information is then pushed to an offline server (not accessible via the Internet) where the information is safely decrypted and the transaction is completed.

Credit card and checking account data is never stored online in plain-text (readable) format. In addition, this information is never transmitted in plain-text via email, socket, GET, POST, etc.

Please let us know if you have any questions regarding the security of your information.