Pension Financial Services website protects you and your data in three ways:
Secure login
Some pages on the PFS website are available only to those authorized to see them. Access is limited via login. PFS relies on passwords for user authentication. To guard against password theft or interception, PFS uses respected methodologies for the secure storage and exchange of passwords. Even PFS personnel do not know your password, because passwords are stored in an unreadable form (a one-way hash using the MD5 hash algorithm). When you log in, your password is sent through an encrypted connection (see below). The PFS Web server processes the password (using the MD5 hash algorithm) and compares the result with the stored form. If the two match, you are admitted.
Secure data transfer
After login, all data communications between your browser and our server are protected by HTTPS and SSL (Secure Sockets Layer). This is the same technology used by banks and financial institutions to secure access to accounts over the Internet.
What is SSL?
The SSL protocol is the Web standard for encrypting communications between users and SSL (secure sockets layer) websites. Data sent via an SSL connection is protected by encryption, a mechanism that prevents eavesdropping and tampering with any transmitted data. SSL provides businesses and consumers with the confidence that private data sent to a Website, such as credit card numbers, are kept confidential. Web server certificates (also known as secure server certificates or SSL certificates) are required to initialize an SSL session. You know when you have an SSL session with a website when your browser displays the little gold padlock and the address bar begins with a https rather than http.
Secure data storage
All client information that may be accessed through the PFS website safely resides in a database that is physically located behind PFS's internal firewall. Access to this database is restricted to PFS's web server only.