Security Statement

Why are cookies important?
This site uses a common technique, HTTP-header cookies, to identify one page request from another.  The cookies this site creates do not contain any personal information.  They merely allow the site to recognize a page request comes from someone who has already logged on.  The information is stored temporarily in memory and is available only during the course of a session.  The information is removed once you log out or close down your browser.  Some browsers can be configured to warn the user whenever a site sends it a cookie.  If your browser provides an edit message asking you to accept or reject the use of cookies, you should accept.  The site will not work without them. « 

What is encryption?
Encryption is a mathematical process that transforms a message in order to conceal its meaning.  Encryption is used to protect messages from eavesdropping, tampering, or message forgery over the Internet. « 

How is encryption used by this site?
It is the policy of the STC to encrypt the transmission of all personal or financial information that is transmitted between our server and your browser.  The security standard SSL, Secure Sockets Layer, is used to implement this.  SSL is the leading standard for securing World Wide Web transmissions.  It is also supported by the leading browsers, Netscape Navigator* 1.1 and above and Microsoft Internet Explorer* 2.0 and above. « 

How can I tell that SSL is in effect?
The URL of a secure document begins with HTTPS://.  The additional "S" on the end of the familiar HTTP indicates a secure channel to the server.  Also, in Netscape Navigator* 3.x, the security icon in the lower left corner of the browser will change from a broken door key on a gray background to an intact door key on a blue background once a secure channel is established.  In Netscape Navigator* 4.x and Microsoft Internet Explorer* 3.x and 4.x, the security icon is a padlock.  The hasp of the padlock will be closed once a secure channel is established. « 

How secure is SSL?
SSL uses public-key encryption.  This technology can use keys of various sizes.  The larger the key length, the greater the number of possible keys, the more difficult the decryption challenge, and the more secure the message.  Browsers generally have one of two key sizes--40-bit or 128-bit.  Messages encrypted with a 40-bit key could possibly be decoded in less time than those encrypted with a 128-bit key.  Messages encrypted with a 128-bit key are 3 x 10²⁶ (3 followed by 26 zeros) times harder to break.  It is estimated that it would take 1 trillion trillion years to crack a 128-bit message with current technologies.

This site will provide the maximum level of encryption supported by your browser.  Those wishing to maximize the security of their Web activities are encouraged to obtain a browser with 128-bit encryption.  These browsers are available for downloading at home from either Netscape* or Microsoft* at no cost except telephone time.  However, by United States law, these browsers are available to U.S. and Canadian citizens or permanent residents only. « 

Why do I need to use a particular browser?
In order to maximize the privacy of your information as well as to provide a consistent visual presentation, a relatively current and capable browser is required.  For example, the browser must support JavaScript, Cookies, and Secure Sockets Layer (SSL), an encryption standard for browsers.  For enhanced security, we recommend using a browser version that uses 128-bit SSL encryption.  Furthermore, those browsers have been used to extensively test this site to ensure that the pages display and behave in a predictable manner.

The browser requirement for this site is Netscape Navigator* 3. 0 and above, or Microsoft Internet Explorer* 3.0 and above.  Other browsers may work if they have the required browser features; however, this site has not been tested or certified for other browsers.

Note: If you are an AOL user, you will also need to use one of the minimum required browsers.  You may need to download one of the approved browsers to use STC's online filing system. « 

What responsibility do I need to take as a customer?
Customers have their own set of responsibilities in providing security for their STC accounts.  UserID's and any passwords must be kept secret.  You should make sure that no one is physically watching as your UserID's or passwords are entered.  It is also important to remember to log out of STC's online filing system and even exit the browser when leaving the computer.

If your PC is left unattended with the browser running and a valid UserID and password cached, anyone may gain access to the account.  You should also take precautions to keep computers clean and free from viruses that could be used to capture your UserID or password keystrokes. « 

*Netscape Navigator is a registered trademark of Netscape Communications Corp. All rights reserved.
*Microsoft Internet Explorer is a registered trademark of Microsoft Corp. All rights reserved.

STC and the STC logo are trademarks of the Sales Tax Clearinghouse Inc.
©1999-2008 Sales Tax Clearinghouse  All rights reserved.
Legal Information — Contact: support@theSTC.com.