batch encrypting customer orders on remote secure server?

Anthony E. Greene agreene@pobox.com
Sat May 4 21:48:01 2002


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 04-May-2002/12:30 -0400, "L. Weber" <yukiko@userdefined.net> wrote:
>I am new to the world of encryption, so please bear with me.
>
>I would like to know if it's possible for me to use GPG to batch
>encrypt my customers' orders and credit card numbers on a remote
>third-party-hosted secure server.

That has been asked often enough that you should be able to find answers
and scripts in the list archives.

>uses CGIWrap which creates some restrictions for .cgis when using
>SSL.  For example, I can't use a .cgi to send an e-mail when SSL is
>being used.

This may be a problem. Try several methods: open a pipe to sendmail, open
a pipe to mail, use the Net::SMTP module.

>The encryption key would need to be located on the remote server
>and I know the passphrase will need to be eliminated,

You don't have to use a secret key on the server unless you plan on having
it sign the messages. If all it's doing is encrypting, then all it needs
is the public key part of the keypair you created just for this
application.


Tony
- -- 
Anthony E. Greene <mailto:agreene@pobox.com>
OpenPGP Key: 0x6C94239D/7B3D BD7D 7D91 1B44 BA26 C484 A42A 60DD 6C94 239D
AOL/Yahoo Chat: TonyG05         HomePage: <http://www.pobox.com/~agreene/>
Linux. The choice of a GNU generation <http://www.linux.org/>

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: Anthony E. Greene <mailto:agreene@pobox.com> 0x6C94239D

iD8DBQE81Ds8pCpg3WyUI50RAgEJAJ4/Gjzo0JD5OWfafHMVbvQQxKdIrQCgz6Ig
Z1fkUVYTqPkzDh00CMEKQFY=
=SmP5
-----END PGP SIGNATURE-----