Barry Hill wrote:
>
> Secure transmissions are all very well, but the next
> question is how to store the data securely on the machine,
> [..]
> I'd thought of write()'ing sensitive data to a root-readable
> file but because apache is running as "nobody" I can't do
> this (?).
As a first attempt: Add a user "wwwrun" for Apache instead of Apache
running as "nobody". Make directory write-only to "wwwrun" for storing
the data.
Second attempt: Encrypt or send data with S/MIME.
Ciao, Michael.
______________________________________________________________________
OpenSSL Project http://www.openssl.org
User Support Mailing List [EMAIL PROTECTED]
Automated List Manager [EMAIL PROTECTED]