<background information>
我依家有個 project, 需要高度 security.  佢有 e-learning, e-certificate, knowledge base 等等.

<question>

請問有無人識得點樣去 secure 個 website?

我所知既只有這些
1. webhosting
    - SSL/TLS

2.  code
    - login password: 將個 password 變成用 mouse 按 (咁比較難用 software 去估個 pwd)，example:   http://www.citibank.com.au/australia/signon/
    - Register: 放個圖上去叫 user 打 code (防止 automated registration)
example:

3. PKI - Public key infrastructure, 請問 PKI 係咪同 public key encryption 係同一樣野?
點樣去 impletement PKI?  係叫 web developer 寫 code 去 encrypt d data 定係有 PKI 既software 要用?

除左 lee 幾樣野之外，點樣可以 secure 一個 website? 唔該晒

如果你識 linux 既話，最好用 apache 做 web server，唔好用 windows 既 iis！

jin :
我唔識 linux 。不過我會同寫 code 既人講下。唔該晒

It is very hard to answer your question because it involves so many details. It means it also makes it hard to explain in here. But you should pay attention to the following:

- data encryption: SSL
- strong login authenication: SecureID
- application security: what is the application architecture model? (client and server or 3 tier?)

hope this gives some pointers to begin with.....

good luck

jin :
麻煩晒你。我會用你所講既 google 下