[Enigmail] Small question about redistribution of enigmail

[Robert J. Hansen]

John Clizbe wrote:
> For an e-commerce site, you should only have to implement S/MIME mail
> signing/encryption. The web part should be fairly cookbook.

Or, for that matter, do what professional ecommerce sites do: shrug and
say "we're not going to worry about this, we're just going to put those
mechanisms in place the credit card companies say we have to do."

Talk to your local bank and ask what you'd have to do to process Visa
cards online.  Visa has a lot of ties to the banking industry, moreso
than MasterCard or Discover, so your local bank can probably point you
in the right direction.

Part of good engineering is not making design decisions before you have
to.  Making a commitment to a particular kind of ecommerce security
solution before knowing what the real world uses for them seems to be a
violation of this rule of thumb.  :)