What The Web User Should Know:

Everyone knows to look for the padlock on the bottom of the browser, right? If not that tells you that the web page is secure. Along with that padlock on the bottom of the browser your web page SHOULD display https instead of http (The s stands for 'secured')

How is a web page secure?

HTTPS is the use of Secure Socket Layer (SSL) as a sub-layer under its regular HTTP application layering. If you view a HTTPS page and see a warning pop up about the certificate of the site read the warning carefully. Here are a couple of warnings that I came across when setting up a SSL certificate for my site. Such as . . . Certificate is for https://theinternetpresence.com but the page is for https://www.theinternetpresence.com. (When I edited the hyperlink and left out the www, it resolved the issue.) Certificate points to hsphere.com instead of theinternetpresence.com. (Again, a simple setting resolved this issue.) Hsphere is the hosting control panel I use that controls my site. But look carefully at warnings that point to a web site that you are not familiar with and warnings that state there is no SSL certificate at all. For an example of these warnings you can visit my site at https://www.theinternetpresence.com , because currently I'm switching from a Windows Server to a Unix Server for added stability and security. If you did not receive a warning then it means that the move was completed.

For a brief description on what the requirements are to obtain a SSL certificate look below under "What's the process involved for getting a SSL Certificate?"

What about types of Browsers?

Internet Explorer used to control 90% of the market for web browsers, so naturally hackers and cheaters were attracted to attacking that browser to obtain information. So the safe alternative was to use a different browser like Firefox that was not very popular. But as Firefox gains popularity they will become a target as well. Their goal was to gain 10% of the market, and they are now pushing 20% according to statistics of people visiting my site.

You would be interested in knowing that with a properly configured web site with the correct shopping cart script for collecting credit card information that connects to a merchant account gateway, the credit card number is never seen by the webmaster. It's true! I cannot see the process of filling out the information, and when I visit my merchant account online to view transactions I'm not shown the full credit card number. But be warned on how people can work around this!

How can they process a credit card that is insecure and/or see my credit card number?

• If the page is unsecured. (http instead of https and the lock is open on the bottom of the browser)
• If they use a simple online form to ask for the information instead of a script. (When the information is emailed out instead of processed) Even if the form is on a HTTPS page it would still be secured, but as soon as it is mailed it becomes unsecured and if anything happens the web site owner could lose his merchant account and not be able to apply for a new one EVER AGAIN! I've seen customers use this way to process cards and manually enter them at their store. Needless to say I refused to create a site that operates this way for liability issues.

What the Online Store Owner Should Know:

What's the process involved for getting a SSL Certificate?

• Fill out the required information of name, address, phone number, etc.
• Certificates range from $39 to $1499. Typically the $39 one will work fine.
• You will get a 'phone authentication' call recording your voice stating your name for security and asking you to enter a 4 digit code that would be provided for you.
• After that has been verified you can install the SSL Certificate.

What alternate ways are there to accept payments?

• Check. But this way takes longer to achieve payment.
• COD Will you get the payment after it's delivered?
• PayPal Secure, but viewed as unprofessional. (I still offer it as an alternative though)

If you have a business that you would like to move online you should get a merchant account or have your 'brick and mortar' merchant account upgraded to online by adding a gateway. If you have any questions at all on anything about merchant accounts talk to Corey Bryant. He has an enormous amount of information on merchant accounts and setting up your business online.

In Conclusion:

It is possible to have an unsecured transaction over the internet, but by far it is MUCH SAFER than handing your credit card over to someone who can jot down the number and verification code on the back of the card, or stating the card number over the phone for an order. I sincerely hope that I did not scare anyone off with this report, but gave them the knowledge on how to protect themselves.

Until the next article have a great day!

Copyright © Michael Rock
Internet Presence
www.TheInternetPresence.com

The owner of this registered company has over twenty years experience with DOS, windows business applications, numerous programming languages, artistic development, and web design. Other areas of interest include web marketing, web promoting, and business marketing and development. After the persuasion of those praising his work, he decided to go into business himself and highly suggests everyone else to do the same.

Internet Presence was founded in 2003 from a desire to become independent. Less than 1 year later Internet Presence has had accounts in three different states ranging from a locally owned auto collision repair shop to a glass packaging industry that sells its product worldwide.