header
  Search CBBS Website












Printable PDF of this page


Updated: January 31, 2006

Information about CBBS Website and Email Security
CBBS website online forms and member area logins are processed using SSL. SSL stands for "Secure Sockets Layer" and makes it possible for sensitive data to be safely transmitted over the Internet. The information is encoded by your browser using proprietary technology and is NOT decoded until after it arrives at its final destination. Therefore, even if the information were to be intercepted along the way, it would be totally useless to anyone other than the intended recipient.

SSL makes it possible for you to submit sensitive data (such as personal information or credit card numbers) via your browser without worry of the data being intercepted by a third party. Likewise, it allows us to present sensitive data to you without fear of interception. Because the data is encoded-decoded both ways when using SSL, you may notice a slight slowdown in the speed of webpage processing. You will see an "s" at the end of "http" of the URL for any page served via SSL - this tells the browser you are accessing an SSL server. Any CBBS page being served via SSL should begin with the URL "https://secure7.itsamac.com/www.cbbsweb.org/..."

CBBS Payment processing is currently handled by PayPal. PayPal automatically encrypts your confidential information using an SSL protocol with an encryption key length of 128 bits (the highest level commercially available).

  • After you complete your selections, click the PayPal button. You will be directed to the PayPal Secure Server for payment processing. If you have already have had a PayPal or eBay account in the past, and are using the same computer with cookies enabled, the PayPal server may recognize you and ask you to complete your PayPal login. Note that a PayPal or eBay account is NOT required to complete any transaction.
  • Please complete the requested billing address information (which MUST match that on the credit card or debit card used)
  • Before you even register or log in to PayPal's site, their server checks that you're using an approved browser - one that uses SSL 3.0 or higher.
  • PayPal automatically encrypts your confidential information using the Secure Sockets Layer (SSL) protocol with an encryption key length of 128 bits (the highest level commercially available).
  • For your safety and security, PayPal will require that you enter your credit card's verification number. The verification number is a 3-digit number printed on the back of your card. It appears after and to the right of your card number. (An American Express verification number is a 4-digit number printed on the front of your card. It appears after and to the right of your card number.)
  • If applicable, please include your current membership ID number in the "Comments" section of the PayPal checkout screen. You may also include any other comments in this section if you wish.
  • Upon successful completion of your PayPal transaction, please press "Continue" and you should be redirected back to the CBBS server, which will display a receipt of your transaction in your browser window.
  • You will also receive a transaction confirmation email directly from PayPal.

    Once your information is entered into PayPal's processing, it resides on their server that is heavily guarded both physically and electronically. PayPal servers sit behind an electronic firewall and are not directly connected to the internet, so private information is available only to authorized computers. PayPal is responsible for maintaining all credit card and financial institution information you submit online. This information is NOT transmitted to or maintained by CBBS.

    An important note about email security:

    1. NEVER respond to any request, or click on ANY links or attachments in emails that "appear" to be from PayPal or any other financial institution stating that you urgently need to "update your account to avoid termination" or that "your account is in jeopardy" or similar. These typically have a generic greeting, such as "Dear Valued 'Financial Institution Name' Member", suggest a sense of urgency that you must "respond ASAP", and contain fake links that even may contain the words of the financial institution in them. These are called "spoofs" or "phishing scams" which actually link to fraudulent sites.

    2. PayPal and/or CBBS will NEVER send emails asking you for credit or debit card numbers, bank account numbers, driver's license numbers, email addresses, passwords or your full name.

    3. ALWAYS log in to PayPal by opening a new web browser and typing in the following: "https://www.paypal.com/". You should never log into PayPal or any other financial institution website from a link in an email.

    4. If you have any doubt whether an email is really from PayPal, here's how to report it:

    • Forward the message, including the header to spoof@paypal.com.
    • Don't alter the subject line or forward the message as an attachment—doing so prevents them from investigating it further.
    • Once you have forwarded the email, you can then delete it from your email account.

    For general information on online shopping safety, please see the PayPal e-commerce Safety Guide (PDF file). PayPal also offers a comprehensive section on Identify Theft Protection HERE.

    If the above does not completely address your question or concern, please send an email to the Webmaster, or send a detailed question using the online form HERE.

    Please click HERE if you wish to return to the online shopping page.