Our payment page uses the HTTPS (Hypertext Transfer Protocol Secure) protocol, a secure version of http that allows for secure e-commerce transaction. To have the https protocol, we acquired SSL (Secure Socket Layer) digital certificate that ensures the encryption of all the sessions with the digital certificate.

1. 3GDP PAYMENT PAGE SECURITY
When doing e‐commerce, there are 3 things that the website targets to achieve:
a) Ensure your data isn’t read by anyone who is not approved to read it
b) Ensure your data cannot be modified by anyone
c) You can establish that they are what they really claim to be
Our payment page uses the HTTPS (Hypertext Transfer Protocol Secure) protocol, a secure
version of http that allows for secure e‐commerce transaction.
To have the https protocol, we acquired SSL (Secure Socket Layer) digital certificate that
ensures the encryption of all the sessions with the digital certificate.
NB​: Encryption is a process of turning meaningful information into incomprehensible
‘nonsense’. Scrambling information for transmission. based on encryption algorithm
SSL uses a cryptographic system that encrypts data with 2 keys (public & private) that
work together to establish an encrypted connection.
NB​: SSL is a security technology that establishes encrypted link between a server and a
client (e.g website and browser or mail server and mail client)
Normally data transmitted between the web servers and browsers is in plain text thus
vulnerable to eavesdropping; thus SSL is a secure protocol to encrypt the transmitted data.
A browser trying to connect to an SSL secured site, the browser & web server establish SSL
connection through SSL Handshake.
Our connection to secure.3gdirectpay.com is encrypted with 128‐bit encrytion. This means
the length of the “key” to this cipher has 128 zeros and ones. to break a cipher, you have to
try every single key and thus the more keys it has, only means you must try so many keys
to get the right one. with 128‐bit, there are probabilities of 2​128

2. This protocol prevents the transmission of your private information through the website
till the verified details are transmitted securely and not accessible for any other person to
check.
Today its mandatory to secure any page which sends private customer information to the
server, without the SSL the website owner is not allowed to collect private information, like
card details, address etc.
TAKE­AWAY:
Access a sample of our payment page with this two url:
1. https://secure.3gdirectpay.com/pay.asp?ID=6A866A19‐ADE4‐4D27‐B0F9‐FC7EEE
0DDD59
2. http://secure.3gdirectpay.com/pay.asp?ID=6A866A19‐ADE4‐4D27‐B0F9‐FC7EEE0
DDD59
All aspects of the 2nd url look okay except the protocol. It is on http as opposed to the
secure https and thus there is no connection using the insecure protocol.
Report Compiled and Written by:
Brian Aleri