Web-based applications often need a higher level of security testing
than do most applications. This is especially true of e-commerce sites.
Although sufficient technology, namely encryption, exists to allow customers
to complete transactions securely over the Internet, you should not
rely on the mere application of technology to ensure safety. In addition,
you will need to convince your customer base that your application is safe,
or you risk losing customers. Again, Chapter 10 provides more information
on security testing in Internet-based applications.