The Underscore Archives

 > > You could take the card details over SSL, split the number up, email
> > half and store the other half on the server - at least that way the
> > number is never whole in the same place. This doesn't stop a dodgy
> > employee from using the card details though (amongst other things!).
>
> I don't see that as a good solution at all. Sorry ;) You want to
> encrypt the details as soon as they are received, using a public key,
> with the private key somewhere safe offsite, you really don't want to
> lose or expose that private key.

no worries, it wasn't a serious suggestion!

jb