Configuration Guide for Secure Forms

In order to provide your customers a secure environment to conduct web based transactions, KCnet offers access to a secure server.  A digital id from Verisign  is used to insure secure communication between your client's browser and our server via SSL.  When the client browser opens the secure form they will notice the gold key in place of the broken key in the lower left-hand corner of their Netscape web browser.  In Internet Explorer you will notice the gold padlock in the lower right-hand corner.

After the form is submitted, the data contained in the form must remain secure until you receive the results.  The form data will be PGP encrypted and automatically e-mailed to you.  You must have PGP available on your local computer in order to decrypt the PGP encrypted mail message.  The commercial version of the PGP software, compatible with our server, is available from Pretty Good Privacy, Inc. (PGP 6.0.2, RSA version).  You may also use a free version of PGP which is available at the MIT distribution site for PGP.  If you choose to use PGP Freeware (not for the feint of heart), you must download an older DOS version, PGP 2.6.2, in order to create your secure PGP key that is compatible with our server (must be RSA, not Diffie-Hellman).  See our help file on creating/importing PGP freeware keys.  As an alternative, KCnet upon request, will generate the freeware key pair for you and email you both the secret and the public keys.  It is imperative that you make backup copies of your keys as KCnet will not maintain copies of any secret keys.  Any data encrypted for a lost secret key will be irretrievable.

Email the file pubkey.asc to support@kcnet.com with "PGP public key" in the subject.

Creating a secure form

In order to have the contents of a form mailed to you each time the form is completed, a modified version of FormMail, with the addition of PGP capabilities, has been made available for your use. The following lines of code must be added to your secure form in order to access this capability.

form action="/cgi-bin/KCWinMail.pl" method="POST"
input type="hidden" name="RECIPIENT" value="my_email_addr@kcnet.com"
input type="hidden" name="SUBJECT" value="My Form Subject"
input type="hidden" name="PGP_TARGET" value="my_email_addr@kcnet.com"


For more information on the capabilities and syntax of FormMail, please see the documentation.