<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="NSA"><CENTER><HR></CENTER><BR><H2>Spook-Proof</H2></A></CENTER><H2>Background</H2> As shown in the film "The Net," everything I send over the WWW requires nothing short of spook-proof public key encryption. This is done by my
registering my public key (string of gibberish) in a secure public place.
In order to do secure business with me, a person will have to download my public key and I will provide them with my private key. Together these two keys
provide a spook-proof communications environment.<BR><H2>Benefits</H2>I know that if this procedure is done properly, not even the NSA can break into my private information.<BR><H2>Costs</H2>I am concerned enough about this issue to allocate my limited time doing homework on public key encryption, registering my public key, selecting a secure server and using a secure browser. I am using a secure browser on a secure server, and my public key is on record.<BR><H2>Risks</H2> I am willing to incur any slow-down in transmission time required to have secure communications. I am willing to take the risk that some hacker will break this encryption system anyway.<BR><H2>How to Do It</H2>Do your <A HREF="
http://www-genome.wi.mit.edu/WWW/faqs/www-security-faq">homework</A>, get
setup with <A HREF="http://draco.centerline.com:8080/~franl/pgp/pgp.html">PGP</A>, register your public key, confirm that your server and browser are secure, then proceed.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="VIR"><CENTER><HR></CENTER><BR><H2>Virtual Banking</H2></A></CENTER><H2>Background</H2>I give the virtual bank my credit card information off-line, in a secure manner. When I order on-line from a merchant who is tied into my virtual bank, I give the merchant my account number. The merchant transfers funds from my virtual bank to his bank, but only after confirming with me by e-mail that the transaction was actually mine and was correct.<BR><H2>Benefits</H2>If anybody steals my account number, it is useless to them. If I am asked about a bogus transaction, I merely decline it.<BR><H2>Costs</H2>First Virtual, for example, retains 2% of the sale amount plus $0.29 times the number of transactions plus $1.0O. I am willing to incur the time required to set up my virtual bank account, and I am willing to confirm all my on-line orders with appropriate e-mail communications. I am willing to incur any time delay in filling my order caused by my not answering my e-mail promptly.<BR><H2>Risks</H2>I am willing to take the risk that a hacker might steal my account number, make bogus orders and then corrupt the e-mail system so as to fool the merchant into thinking that the bogus order was confirmed.<BR><H2>How to Do It</H2>Follow the links to the virtual bank of your choice. Follow their
directions for establishing an account by mail or telephone. When you have
your virtual bank account number, return here and place an order by filling
in your virtual bank account number in the field provided and then
submitting your order across the internet.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="SIM"><CENTER><HR></CENTER><BR><H2>SimplySafe® </H2></A></CENTER><H2>Background</H2>I know that if the spooks in the NSA, CIA, FBI or KGB want my credit card information, then they already have it, and I would be wasting my time and money doing complicated spook-proof encrypting. The real issue is protecting my credit card number from on-line hackers. They are not after my name or address or what I ordered. I am only concerned if they steal my credit card number.<BR><H2>Benefits</H2>SimplySafe® protects your credit card number from on-line hackers
without requiring any significant overheads or delays. It is simply safe.
That's all.<BR><H2>Costs</H2>I am willing to put in a couple of minutes right now to ensure that my credit card number is secure from on-line hackers. SimplySafe® requires no accounting, no establishment of public encryption keys, and no use of secure servers and secure browsers.<BR><H2>Risks</H2>I am willing to take the risk that some hacker has a vendetta against ME and REALLY wants to get me and that he/she is willing to spend many hours pursuing just my credit card number, and in the process he/she will have to pass over millions of easier targets.<BR><H2>How to Do It</H2>Start by sending us the first four digits of your credit card. After those digits have been encoded, you will learn more about how SimplySafe works
as additional sets of digits are encoded. When the credit card information
has been successfully and securely transmitted, you will need to fill in
your name, street, etc., as with any order.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="USM"><CENTER><HR></CENTER><BR><H2>U.S. Mail</H2></A></CENTER><H2>Background</H2>Every lock has a key, so I don't trust any kind of on-line security.<BR><H2>Benefits</H2>The U.S. Mail may be slow, but is often reliable. Everyday sensitive
information gets safely mailed by millions of persons.<BR><H2>Costs</H2>The U.S. Mail costs $0.32 to send a first-class letter. Even after
adding costs of letter paper and printouts, this method is cheap.<BR><H2>Risks</H2> I am willing to take the risk that someone along the route may steam open my envelope, steal my credit card number, reseal the envelope, and send it along.<BR><H2>How to Do It</H2>Print out your order form from your browser and fill in your credit card number by hand or enclose a check or certified money order for the proper
amount. Send the completed order to us using the trusty old U.S. Mail.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="FAX"><CENTER><HR></CENTER><BR><H2>FAX</H2></A></CENTER><H2>Background</H2>I do not trust any on-line security system, and the U.S. Mail is too slow, so I will use a fast, safe FAX machine to send you my credit card information.<BR><H2>Benefits</H2>FAX machines are widely available, cheap, and fast.<BR><H2>Costs</H2>Many commercial FAX services charge about $2.50 for the first page
and about $1.00 for additional pages, so long as the destination is in
the U.S. You may FAX from your own computer or FAX machine for whatever
the telephone charge happens to be. This FAX will travel to the state of
Oregon.<BR><H2>Risks</H2>I am willing to take the risk that my FAX might fall out of the bin and be found by the night janitor, who might then copy my credit card number.<BR><H2>How to Do It</H2>Print out the order form from my browser, fill in the credit card information by hand, and FAX the order to us at the FAX number on the order form. Try to FAX during regular business hours, Pacific time, to minimize the risk of your credit card number sitting in the FAX bin for long hours unattended.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
<BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><BR><CENTER><A NAME="PHO"><CENTER><HR></CENTER><BR><H2>Telephone</H2></A></CENTER><H2>Background</H2>I do not trust any on-line security system, the creaky old U.S. Mail, or any FAX machine that might drop my number on the floor just when some untrustworthy person was passing by, so I will call you with my order, using your convenient 800 number order line on your order form.<BR><H2>Benefits</H2>I have a phone, and you have an 800 number. I feel good talking to a
real person, and you folks are so courteous and sweet on the phone.<BR><H2>Costs</H2>There is no charge for you to use our 800 number, provided that you
are calling from the U.S.<BR><H2>Risks</H2>I am willing to take the risk that your phone or mine might be tapped and that anything I say on the telephone might be recorded and used by disreputable telephone hackers or government agents.<BR><H2>How to Do It</H2>Continue to fill out the order on-line. Consolidate the order to get
your bottom-line figure for what you will need to pay. Then look at the screen that has your bottom-line figure on it and find the 800 number at the top. Call that number during regular business hours, Pacific time, and tell us your credit card information and what you want to order.<BR><CENTER><A HREF = "#TOP"><IMG BORDER=0 ALIGN=MIDDLE ALT="RETURN TO
