Forum Moderators: not2easy
Have a paranoid client. They want to put data online as part of an extranet via a log in panel. No problems so far, however, the CEO does not want clients to be able copy any of the data. The data has no commercial value other than he does not want the competition to see how they do what they do.
There is no obvious way to stop his clients from copying the data. However, from a transmitting POV do I need to go down the SSL route with encryption?
TIA
Rich
There is no obvious way to stop his clients from copying the data. However, from a transmitting POV do I need to go down the SSL route with encryption?
If the clients can see it, they have a copy of it. Even if you embed the data within a Flash file or PDF or even encrypt it - when it's viewable it can be printed out, or copied. If he doesn't want his competitors to see it then they shouldn't put it up. Now if the client's are technically savvy then you might be able to use some form of deterrent but I wouldn't count on it as a guarenteed prevention.
<added>What good would a POV do?</added>
No options in terms of having the data online it's a questionnaire and the RIO from which means that having it online with the results sent to the client is excellent. My question, not being from a security background is how safe is the data from a transmission POV?
What are the technically savvy options?
POV = point of view
Rich
Ok, now I think I'm with you. As far as just the transmission goes, an SSL connection with the client is best option. It's used for shopping carts so it's plenty secure to wrap up a survey.
In general, the actual exchange from when a client (the web browser in this case) first requests the page and then gets it from the server, is open to anyone who knows how to hack it. The caveat is in order for someone to get access to that conversation they'd need to build/implement a listening post (some hardware and/or software which monitors a certain IP address). The likelyhood that they'd go the trouble of this for data that has no monetary value is doubtful.
Rich
