[Webcom] Re: [SAC] Stuck on Website Migration

[Seven (aka Arnulf)]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 10.11.2011 09:26, Martin Spott wrote:
> Hi, just a short comment before the discussion leaves the list (well,
> maybe it already did ....  ;-)

Not sure whether it is a good idea to leave this list. We need to
somehow integrate the Web site into the responsibilities of SAC if we
want to avoid that we lag 2 versions behind current release of the CMS
software.

> On Wed, Nov 09, 2011 at 12:18:34PM +0000, Jorge Gustavo wrote:
> 
>> So, my approach is:
>> i) support LDAP logins in D7 http://www-new.osgeo.org/
>> ii) support SSL in D7 http://www-new.osgeo.org/
> 
> Please swap these two: Getting SSL encryption working should be the
> first step _before_ people start sending their unencrypted LDAP
> passwords over The Net.  Generally speaking your PW is already to be
> considered as being compromised even if you've done that just one
> single time.
> Now think of how many services you're using with this password ....
> 
> Cheers,
> 	Martin.


- -- 
Exploring Space, Time and Mind
http://arnulf.us
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAk67jDYACgkQXmFKW+BJ1b19TACfdE1bLLKtFks8BgcKJYBEuueD
qncAn3nY60EfBXZAo1YTcHMXF6QYAoTW
=SeRR
-----END PGP SIGNATURE-----