NCAA ?!

[Chad McDonald <chad.mcdonald () GCSU EDU>]

Are any of you using NCAA Clearinghouse?  An audit of our athletic
department revealed that the site does not use ssl or any other mechanisms
for security other than username and password.  I find this disturbing and
hope that one of you has already crossed this bridge and has a solution.
The URL in question is http://ncaaclearinghouse.net .  For those of you who
are unfamiliar with NCAA, this site is the data mart for high school and
college athletes.  They track SSNs, grades, and other such info needed to
ensure eligibility to play sports.


Chad McDonald, CISSP
Chief Information Security Officer
Georgia College & State University
Phone   478.445.4473
Cell       478.454.8250
Fax       478.445.1202
Email   chad.mcdonald () gcsu edu