Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Tino Wildenhain
Joshua D. Drake wrote: Guy Rouillier wrote: Richard P. Welty wrote: Guy Fraser wrote: Paypal has a perception issue - they are perceived as being tightly linked with eBay. That's a problem in the corporate arena. If my stock broker were to tell me they do all their financial transactions

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Guy Rouillier
Alvaro Herrera wrote: My "bank" is also "not a bank" (they say they are not "FDIC insured" which I think is the actual problem at hand). Do I have to be worried? Depends what you use it for. If this is an online bank that you use only for online transactions and you maintain a balance of sa

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Alvaro Herrera
Joshua D. Drake wrote: > Guy Rouillier wrote: > >Richard P. Welty wrote: > >>Guy Fraser wrote: > > >Paypal has a perception issue - they are perceived as being tightly > >linked with eBay. That's a problem in the corporate arena. If my stock > >broker were to tell me they do all their financia

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Richard P. Welty
John DeSoi wrote: On Jun 7, 2007, at 4:03 PM, Richard P. Welty wrote: at the day job, when we switched from paypal (who we found very undependable) to authorize.net, we were very pleased to discover that authorize.net would take care of the credit card numbers for us, so we didn't have to try

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread John DeSoi
On Jun 7, 2007, at 4:03 PM, Richard P. Welty wrote: at the day job, when we switched from paypal (who we found very undependable) to authorize.net, we were very pleased to discover that authorize.net would take care of the credit card numbers for us, so we didn't have to try to secure them

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Joshua D. Drake
Guy Rouillier wrote: Richard P. Welty wrote: Guy Fraser wrote: Paypal has a perception issue - they are perceived as being tightly linked with eBay. That's a problem in the corporate arena. If my stock broker were to tell me they do all their financial transactions through Paypal, I'd pro

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Guy Rouillier
Richard P. Welty wrote: Guy Fraser wrote: Have you thought about setting up an account with PayPal, and having people pay through PayPal? Let PayPal deal with the security, and credit card info, after all it's what they do. at the day job, when we switched from paypal (who we found very und

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Richard P. Welty
Guy Fraser wrote: On Tue, 2007-06-05 at 16:51 -0400, Andrew Sullivan wrote: Yes. I agree, in principle, that "don't store them" is the best advice -- this is standard _Translucent Databases_ advice, too. For the least-stealable data is the data you don't have. But if there is a business ca

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-07 Thread Guy Fraser
On Tue, 2007-06-05 at 16:51 -0400, Andrew Sullivan wrote: > On Tue, Jun 05, 2007 at 07:29:02PM +0100, Peter Childs wrote: > > Unfortunately you still need to store them somewhere, and all systems can > > be hacked. > > Yes. I agree, in principle, that "don't store them" is the best > advice --

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-05 Thread Andrew Sullivan
On Tue, Jun 05, 2007 at 07:29:02PM +0100, Peter Childs wrote: > Unfortunately you still need to store them somewhere, and all systems can > be hacked. Yes. I agree, in principle, that "don't store them" is the best advice -- this is standard _Translucent Databases_ advice, too. For the least-

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-05 Thread Joris Dobbelsteen
>-Original Message- >From: [EMAIL PROTECTED] >[mailto:[EMAIL PROTECTED] On Behalf Of Marko Kreen >Sent: dinsdag 5 juni 2007 21:38 >To: Peter Childs >Cc: pgsql-general@postgresql.org >Subject: Re: Creditcard Number Security was Re: [GENERAL] >Encrypted column &g

Re: Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-05 Thread Marko Kreen
On 6/5/07, Peter Childs <[EMAIL PROTECTED]> wrote: On 05/06/07, Andrew Sullivan <[EMAIL PROTECTED]> wrote: > On Tue, Jun 05, 2007 at 09:28:00AM -0500, Ron Johnson wrote: > > > > If he is a CC customer, the system (which I am DBA of) bills his > > card directly, saving the customer much time and e

Creditcard Number Security was Re: [GENERAL] Encrypted column

2007-06-05 Thread Peter Childs
On 05/06/07, Andrew Sullivan <[EMAIL PROTECTED]> wrote: On Tue, Jun 05, 2007 at 09:28:00AM -0500, Ron Johnson wrote: > > If he is a CC customer, the system (which I am DBA of) bills his > card directly, saving the customer much time and effort. So surely what you have is a completely separate s