From: Jim C. <ji...@iN...> - 2004-11-03 00:16:15
|
One of the wikis I have set up is for a restricted set of admins - it's under https, requires a client ssl certificate, and also requires users to log in before viewing. Reasonably secure ... As a consequence, I'm considering allowing our service passwords to be stored in there. My backend is MySQL, but the db isn't available to any external IP, so I can put up with that. However, page change notifications are emailed out with the complete page source. Plain email isn't secure enough :-( Can I have a page edit notification mailout that *doesn't* send the page content? Preferably for a subset of pages marked "sensitive" but possibly for all? Perhaps the answer is to not use email notifications, and to rely on RSS instead ... but that means I need another application somewhere :-( -jim |