Get Adobe Flash player

Search

Search this site for:


Related Links






Valid XHTML 1.0 Transitional

Valid CSS!





Are You Safe Ordering Online?


Are You Safe Ordering Online?



Even this day and age people
are very insecure about ordering anything online. Even though many people
order and give their credit card information over the phone they still are
hesitant upon ordering online. This article will show you what to look for
to see if it is safe to order online, the general process on how things are
processed online, and the securities involved. Knowledge is the key for
security and I want you to gain security by reading this article.



What The Web User Should Know:



Everyone knows to look for the padlock on the bottom
of the browser, right? If not that tells you that the web page is secure.
Along with that padlock on the bottom of the browser your web page SHOULD
display https:// instead of http://. (The s stands for 'secured')



"How is a web page secure?"



HTTPS is the use of Secure Socket Layer (SSL) as a sub-layer under its
regular HTTP application layering. If you view a HTTPS page and see a
warning pop up about the certificate of the site read the warning carefully.
Here are a couple of warnings that I came across when setting up a SSL
certificate for my site. Such as . . . Certificate is for
https://theinternetpresence.com
but the page is for ">www.theinternetpresence.com">
https://www.theinternetpresence.com. (When I edited the hyperlink and
left out the www, it resolved the issue.) Certificate points to
hsphere.com instead of theinternetpresence.com. (Again, a simple setting
resolved this issue.) Hsphere is the hosting control panel I use that
controls my site. But look carefully at warnings that point to a web site
that you are not familiar with and warnings that state there is no SSL
certificate at all. For an example of these warnings you can visit my site at
">www.theinternetpresence.com">
https://www.theinternetpresence.com , because currently I'm switching from a
Windows Server to a Unix Server for added stability and security. If you
did not receive a warning then it means that the move was completed.



For a brief description on what the requirements are to obtain a SSL
certificate look below under "What's the process involved for getting a SSL
Certificate?"



"What about types of Browsers?"



Internet Explorer used to control 90% of the market for web browsers, so
naturally hackers and cheaters were attracted to attacking that browser to
obtain information. So the safe alternative was to use a different browser
like Firefox that was not very popular. But as Firefox gains popularity
they will become a target as well. Their goal was to gain 10% of the
market, and they are now pushing 20% according to statistics of people visiting
my site.



You would be interested in knowing that with a
properly configured web site with the correct shopping cart script for
collecting credit card information that connects to a merchant account gateway,
the credit card number is never seen by the webmaster. It's true! I
cannot see the process of filling out the information, and when I visit my
merchant account online to view transactions I'm not shown the full credit card
number. "But be warned on how people can work around this!"



"How can they process a credit card that is insecure and/or see my
credit card number?"



  1. If the page is unsecured. (http instead of https and the lock is open on
    the bottom of the browser)

  2. If they use a simple online form to ask for the information instead of a
    script. (When the information is emailed out instead of processed)
    Even if the form is on a HTTPS page it would still be secured, but as soon
    as it is mailed it becomes unsecured and if anything happens the web
    site owner could lose his merchant account and not be able to apply for a
    new one EVER AGAIN! I've seen customers use this way to process cards
    and manually enter them at their store. Needless to say I refused to
    create a site that operates this way for liability issues.



What the Online Store Owner Should Know:



"What's the process involved for getting a SSL Certificate?"



  1. Fill out the required information of name, address, phone number, etc.

  2. Certificates range from $39 to $1499. Typically the $39 one will
    work fine.

  3. You will get a 'phone authentication' call recording your voice stating
    your name for security and asking you to enter a 4 digit code that would be
    provided for you.

  4. After that has been verified you can install the SSL Certificate.



"What alternate ways are there to accept payments?"



  1. Check. But this way takes longer to achieve payment.

  2. COD Will you get the payment after it's delivered?

  3. PayPal Secure, but viewed as unprofessional. (I still offer
    it as an alternative though)



If you have a business that you would like to move
online you should get a merchant account or have your 'brick and mortar'
merchant account upgraded to online by adding a gateway. If you have any
questions at all on anything about merchant accounts talk to
Corey
Bryant
. He has an enormous amount of information on merchant accounts
and setting up your business online. You can email him at

crbryant@loudhost.com?subject=Internet_Presence_sent_me
. You can also find a
wealth of information about SSL certificates at

http://www.theinternetpresence.com/ssl.htm
.



In Conclusion:



It is possible to have an unsecured transaction over the internet, but by far
it is MUCH SAFER than handing your credit card over to someone who can jot down
the number and verification code on the back of the card, or stating the card
number over the phone for an order. I sincerely hope that I did not scare
anyone off with this report, but gave them the knowledge on how to protect
themselves.



Until the next article have a great day!


Copyright Michael Rock

(You have permission to copy this article as long as it remains intact with the
author's byline)


Web development contractor (Web Design and Hosting)


Internet Presence

www.TheInternetPresence.com



About the Author


Internet Presence was founded in 2003
from a desire to become independent. Less than 1 year later Internet Presence
has had accounts in three different states ranging from a locally owned auto
collision repair shop to a glass packaging industry that sells its product
worldwide.