Skip to main content
S
StearmanDriver
Known Participant
March 7, 2009
Question

Is this kind of data usually passed behind SSL?

  • March 7, 2009
  • 1 reply
  • 286 views
Not really a CF question but I know some of you deal with this daily...

I'm building an app for a few local businesses that will send their customers notifications via text or email. This isn't spam but a service the customers will sign up for.

Email addresses and cell numbers are encrypted in the database, and their login passwords are hashed. So I'm hoping the data is pretty secure in the database.

I was wondering, though, if the pages on the site that pass the numbers/emails to the server and back need to be behind SSL? There's no financial data or anything, just phone numbers and email addresses. Is this kind of stuff usually passed behind SSL?

Thanks...
    This topic has been closed for replies.

    1 reply

    F
    Fetch
    Participating Frequently
    March 16, 2009
    For that kind of data I'd say generally that it's not behind SSL, but since you're already going to the trouble of encrypting the data in your database I would say why not take the last step and run it through SSL as well?
    Terms & ConditionsAccessibility statement
    Using the community Terms of use Privacy Cookie preferences Do not sell or share my personal information ad choicesAdChoices