From owner-freebsd-questions Sun Aug 18 17:19:21 1996 Return-Path: owner-questions Received: (from root@localhost) by freefall.freebsd.org (8.7.5/8.7.3) id RAA23670 for questions-outgoing; Sun, 18 Aug 1996 17:19:21 -0700 (PDT) Received: from goffer.research.megasoft.com (gw.research.megasoft.com [206.230.35.93]) by freefall.freebsd.org (8.7.5/8.7.3) with ESMTP id RAA23656 for ; Sun, 18 Aug 1996 17:19:17 -0700 (PDT) Received: from goffette.research.megasoft.com (goffette.research.megasoft.com [192.168.1.2]) by goffer.research.megasoft.com (8.7.5/8.7.3-cmcurtin) with SMTP id UAA04023; Sun, 18 Aug 1996 20:14:19 -0400 (EDT) Received: by goffette.research.megasoft.com (940816.SGI.8.6.9/940406.SGI) id UAA10605; Sun, 18 Aug 1996 20:14:29 -0400 Date: Sun, 18 Aug 1996 20:14:29 -0400 Message-Id: <199608190014.UAA10605@goffette.research.megasoft.com> From: C Matthew Curtin To: Allan Torrey Cc: questions@freebsd.org Subject: Re: fbsd security In-Reply-To: <2.2.32.19960817220112.00673ff4@quicklink.com> References: <2.2.32.19960817220112.00673ff4@quicklink.com> Reply-To: cmcurtin@research.megasoft.com X-Attribution: mattC Sender: owner-questions@freebsd.org X-Loop: FreeBSD.org Precedence: bulk >>>>> "Allan" == Allan Torrey writes: Allan> Would like to hear suggestions re security (on-line catelog Allan> ordering and credit card payment) software for freebsd. Your Allan> reccomendations ... There is very little shrink-wrapped software available in this area currently, for any OS. The most promising of things that I've seen so far is Netscape's LivePayment system, but I don't believe that there is a FreeBSD-compatible version ready yet. You might want to try and contact someone at Netscape to find out any status on this. I've been playing with it for Solaris, and it looks very interesting indeed. http://home.netscape.com/comprod/products/iapps/platform.html#livepay If you're looking for immediate functionality, I would look into Apache-SSL or Netscape's Commerce Server. (I don't know about commerce server's availability on FreeBSD, though.) This will provide the basic framework that you need which will allow secure, authenticated connection between SSL-capable clients and your server, at which point, you'll need to do some CGI work in order to take care of the rest of the system. This month's issue of Dr. Dobb's Journal (http://www.ddj.com/) has an article on developing a Perl-based shopping cart. Hope that gets you going in the right direction. -- C Matthew Curtin MEGASOFT, LLC Director, Security Architecture I speak only for myself. Don't whine to anyone but me about anything I say. Hacker Security Firewall Crypto PGP Privacy Unix Perl Java Internet Intranet cmcurtin@research.megasoft.com http://research.megasoft.com/people/cmcurtin/