[23513] in APO-L
Re: [APO-L] Security (Was Re: [APO-L] Question of posting...)
daemon@ATHENA.MIT.EDU (Robert Dean)
Tue Feb 4 13:03:31 2003
Date: Tue, 4 Feb 2003 13:03:17 -0500
Reply-To: rdean71@cs.com
From: Robert Dean <rdean71@cs.com>
To: APO-L@LISTSERV.IUPUI.EDU
Sheesh...sorry everyone for bringing up an issue that has caused so much unnecessary technical debate. The issue wasn't really directed to the Policy Manual per se, so much as to the general strategy of how to secure online information. If we're focusing on the Board Policy Manual (the sections that aren't problematic from a corporate governance point of view, as referred to by Brother Stratton and others), then perhaps a cleartext password provides a level of security that's reasonable. However, there are certain types of information the National Office may eventually collect/process (e.g., credit card information) that we would not want to transmit across the wire in an unencrypted form.
--Robert
