用于接受银行路由和帐号的安全网络表单
我们有一个网站，我们需要在其中获取想要注册每月 ACH 提款的客户的路由和银行帐号。我想知道实现这一目标的最佳方法。我考虑首先将表单设为 SSL/https 链接并使用 .htaccess modrewrite 强制它。目前，我们会通过电子邮件收到提交到网站网络表格的任何信息的结果。我的下一个问题是，如果您使用 smtp TLS 等，从服务器发送的电子邮件会被加密吗？换句话说，最好的方法是将数据从服务器安全地传输回我们的电子邮件。或者使用电子邮件传输数据完全是一个坏主意。非常感谢任何帮助/建议。
注意：我想补充一点，我们实际上并没有执行 ach。我们只是获取信息并将其传递给供应商来执行 ach。目前，他们传真的是一份书面并签名的表格。我们可以继续这个过程。我只是想自动化这部分。然而，听起来最好甚至外包这部分？
We have a website where we need to obtain our customers routing and bank acct #'s who want to sign up for monthly ACH withdrawals. I was wondering the best way to achieve that. I thought about first making the form an SSL/https link and forcing it with .htaccess modrewrite. Currently we are emailed the results of any information submitted to the site web forms. My next concern is the email sent from the server encrypted if you use smtp TLS etc? In other words what is the best may to transmit the data from the server back to our email securely. Or is using email to transmit the data a bad idea altogether. Any help/reccomendations is greatly appreciated.
NOTE: I would like to add that we are not actually performing the ach. We are just getting the information and passing it on to the vendor to perform the ach. Currently it is a written and signed form they fax. We can continue this process. I was just looking to automate this portion only. However, it sounds best to just outsource even this piece?
如果你对这篇内容有疑问，欢迎到本站社区发帖提问 参与讨论，获取更多帮助，或者扫码二维码加入 Web 技术交流群。
绑定邮箱获取回复消息
由于您还没有绑定你的真实邮箱，如果其他用户或者作者回复了您的评论，将不能在第一时间通知您！
发布评论
评论（1）
实现这一目标的最佳方法是将其外包给已经符合 PCI DSS 规则、当地金融法规等的金融机构。
我会重复一遍：不要自己做。让其他知道发生了什么的人为您做这件事。
有提供此服务的服务：Amazon Payments、Dwolla...为什么您需要处理实际帐号？你关心的是现金到达你手中，而不是它的确切来源。
不，电子邮件不安全。除非你正在加密它，如果你不得不问这个问题，你就不会。 切勿通过普通电子邮件发送机密信息。 （专家警告：没有中间中继的 TLS 安全 SMTP 会话连接到 DNSSEC 提供的 IP 地址是相当安全的。但是，普通人能否正确实现这一点值得怀疑）。
The best way to achieve this is to outsource it to a financial institution which is already compliant with PCI DSS rules, local financial regulations, and the like.
I'll repeat that: do not do it yourself. Have someone else who knows what's up do it for you.
There are services that provide this: Amazon Payments, Dwolla... Why would you need to handle the actual account numbers? What you care about is that the cash gets to you, not its exact origin.
And NO, EMAIL IS NOT SECURE. Unless you're encrypting it, and if you had to ask the question, you're not. NEVER send confidential information in a plain email. (Caveat for experts: a TLS-secured SMTP session with no intermediate relays connecting to a DNSSEC-provided IP address is reasonably secure. It's doubtful that your average Joe would implement this properly, however).