On Feb 7, 2005, at 11:33 AM, Greg London wrote:
Could you track an order with just a tracking number? Maybe an email address and a tracking number?
I would think the tracking number could act as a one-time password, sort of. But maybe I'm missing something.
I could see a potential security issue if the tracking number was something that was easy to generate especially if most of the deliveries were clustered around a particular geographic area. Also, if one just uses an email address with no secondary information, the potential exists that a friend/associate could check to see what someone has been buying. The combination might cut down a lot on these potential abuses, but would mean that the user would have to save all prior emails to see their complete order history. Any other automatic solution than the user saving the order numbers would recreate the security issues above.
_______________________________________________ Boston-pm mailing list [email protected] http://mail.pm.org/mailman/listinfo/boston-pm
