Hi,
I was wondering if someone could help with data security.
We want to add a form to our website that collects personal data. We have an ssl certificate for our site so the information will be collected on a page under https. We understand that if we then email the information to us it will be encrypted between the site and the webserver but the resulting email in to ourselves will not be encypted.
Another idea we've had is to add the data from the form (under https) to a SQL Server database hosted by the same company as our website. We would then run an app on a scheduled task internally that would read the data, add it to an internal database and then delete it from the online database. Are there any obvious data security risks with this method? Is there a better way to get this information from our site securley?
Any help with this would be much appreciated.
Thanks in advance.
M
...
Go to the complete details ...