Hi All,
I just want to shed a little light on the encryption of our security tags.
Our OEM contract with Netegrity stipulates that we encrypt the tags that
access their SiteMinder product. My preference would be to allow access to
all the Spectra tags, but as these are accessing a third-party product,
that's not possible.
best,
libby
Libby Freligh
Sr. Product Manager
Macromedia
[EMAIL PROTECTED]
617-219-2232
-----Original Message-----
From: Michiel Boland [mailto:[EMAIL PROTECTED]]
Sent: Monday, July 30, 2001 4:40 AM
To: Spectra-Talk
Subject: RE: encryption=bad
The encrypted tags are
coapi/utils/cfa_datasourcegetlist.cfm
coapi/utils/cfa_iscollection.cfm
coapi/utils/cfa_isdatasource.cfm
coapi/utils/cfa_resolvecfmapping.cfm
coapi/utils/cfa_securityinitialize.cfm
coapi/utils/cfa_serversettingsget.cfm
tier0/schedule/cfa_scheduleget.cfm
tier0/schedule/cfa_schedulegetlist.cfm
tier0/security/cfa_policycreate.cfm
tier0/security/cfa_policydelete.cfm
tier0/security/cfa_policyget.cfm
tier0/security/cfa_policygetmultiple.cfm
tier0/security/cfa_policyuser.cfm
tier0/security/cfa_profile.cfm
tier0/security/cfa_secure.cfm
tier0/security/cfa_securitycontextdelete.cfm
tier0/security/cfa_securitycontextgetmultiple.cfm
tier0/security/cfa_userdirectoryget.cfm
tier0/security/cfa_userdirectorygetmultiple.cfm
And there are probably some in the wwwroot but I didn't bother to check
since I don't use the webtop anyway.
I know that there exist decrypt utilities so don't bother sending me any
of the decrypted templates. :)
Someone mentioned that cfa_secure is encrypted because it would be a
security risk otherwise. I would say it is quite the opposite. Security
through obscurity is no security at all.
MM, what have you got to hide?
Cheers
Michiel
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Structure your ColdFusion code with Fusebox. Get the official book at
http://www.fusionauthority.com/bkinfo.cfm
------------------------------------------------------------------------------
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/spectra_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
