E-Commerce is one of the valuable benefits of the Internet, but the security issues make a considerable number of patrons reluctant to use this service. Web transactions that use debit/credit cards are the best examples. Although many protocols have been designed to deal with the security issues of Web transactions, Secure Socket Layer/ Transport Layer Security (SSL/TLS) is still the de-facto standard for Web transactions security. By analysing the effectiveness of SSL/TLS with respect to the security requirements of Web transactions, we find that the use of SSL/TLS without compulsion for a client s public key certificate, which is the typical usage, is not able to fulfil the security requirements. The aim of this research is to use cryptography to design a more practical and effective solution to the security issues of the Web transactions.