[NTLUG:Discuss] OT? security comparsion

[John K. Taber]

> Hi All:
> 
> A lot of security experts say sending important on the internet is not
> a
> good idea.
> It is true. But a lot of advantages make people willing to send
> importand
> information over internet.
> Pay by credit card online is one of the example.
> 
> Does send  credit number via email will be "more" secure that SSL web
> site?
> I am talk in generic situation. like we all know https:// will be more
> secure the http://.
> 
> useing fax even more secure?!

I don't think I fully understand the question. Some subjects and verbs
got left out.

But I'm game. Here is my opinion on the subject.

On the internet NOTHING is secure. Period. Even encrypted sessions (SSL)
can be bypassed with TEMPEST monitoring, or an eavesdropping device in
your home or office.

You have to be reasonable. Is your credit card number "secure" when you
tender it to the waiter in the restaurant, at the airline, at the hotel,
or car rental agency? No, of course not. Do you refuse to use your
credit card therefore? Of course you use it.

How can any personal data be secure on or off the internet when
frequently billing is off-shored to countries that do not have the same
legal protections the US does, or has the protection on the books but
not in practice? So far as I know, the only legal protection your
personal data has in Bangalore is contract law between the US company
and the off-shore company, and contract law may be difficult to enforce
in the creaking, erratic Indian courts. Or in China, where the rule of
law is a pious hope but does not yet obtain.

Basically, protection of private data is limited with or without the
internet.

John