RE: [pmm-cms-developers] V2 Status - March 22, 2005

[Michael J. F. <fo...@cl...>]

The use of SSL is not to ensure access to the program but instead to protect
user passwords and information as it is entered on the web to access the
program.  We are planning on offering a "SSL yes" and "SSL no" option.  It
would be advised to use SSL as SSL is (if they have a server) only a matter
of a few minutes to set up.  But yes, if they have to pay for SSL then that
could be an issue and I wouldn't blame them for not using it.  

I'm not sure if an HTACCESS is any better.  I'm not 100% sure if the
password is encrypted during transit.  That is what we are attempting to do.


Thanks,
Michael J. Forte
Technical Writer / Web Designer / Web Host
 
Education
Clarkson University, May 2005
B.S. Technical Communications and B.S. MIS
GPA 3.56
 
Contact Information
Email: mic...@ho...
Campus Phone: 315-268-3731
Cell Phone: 315-882-1873
Per. Phone: 315-677-9076

-----Original Message-----
From: pmm...@li...
[mailto:pmm...@li...] On Behalf Of Bill
Haenel
Sent: Wednesday, March 23, 2005 10:51 AM
To: pmm...@li...
Subject: RE: [pmm-cms-developers] V2 Status - March 22, 2005

On the SSL issue, it is likely that most all stations will have some way
somehow to get SSL access, although depending on their hosting situation it
may cost them additional money to set it up and keep it on a monthly basis.
In the case of University-hosted operations, there may be no SSL at all, as
the institution may be unwilling to present a security risk.
 
This package is by far most likely to be distributed to small stations who
have no knowledge of SSL or why they would need it, or even how to request
it. So mandating its availability adds a complication factor that these
folks don't probably want or need.
 
Are you planning SSL for admin access? if so, seems like using htaccess for
authentication might be an easier way to insure protection. I know it
doesn't completely protect the system from unauthorized access, but then
what does?
 
Thanks,
Bill


-------------------------------------------------------
This SF.net email is sponsored by: 2005 Windows Mobile Application Contest
Submit applications for Windows Mobile(tm)-based Pocket PCs or Smartphones
for the chance to win $25,000 and application distribution. Enter today at
http://ads.osdn.com/?ad_id=6882&alloc_id=15148&op=click
_______________________________________________
pmm-cms-developers mailing list
pmm...@li...
https://lists.sourceforge.net/lists/listinfo/pmm-cms-developers