Ditto what Robert said. I had a customer with two ecommerce sites, one in
Witango, the other a php application. The TrustWave report found virtually
no problems on the Witango site (one item that took 2 minutes to lock down),
the PHP site had pages and pages full of non-compliant action items.

Bill

On Tue, Mar 8, 2011 at 4:10 PM, Robert Shubert <[email protected]> wrote:

> Paul,
>
> I haven't heard of anyone doing this.
>
> I host a few ecommerce sites which are scanned by the usual PCI compliancy
> sites that are out there, including witango.com, and they've never found
> anything of note.
>
> If you (or anyone) wished to conduct a test of a Witango application, I
> would certainly help evaluate any problems found and quickly correct any
> issues which were linked directly to the Witango Application Server.
>
> Security is something that I think about often as I design new features and
> improvements for Witango.
>
> Robert
>
> -----Original Message-----
> From: Storey, Paul N. (MSFC-IS30)[MITS] [mailto:[email protected]]
> Sent: Tuesday, March 08, 2011 2:47 PM
> To: [email protected]
> Subject: Witango-Talk: HailStorm
>
> Has anyone used Hailstorm to test for vulnerabilities in a WiTango
> application?  If so, were there any issues that were related specifically to
> WiTango?
>
> Thanks!!!
>
> ----------------------------------------
>
> To unsubscribe from this list, please send an email to
> [email protected] with "unsubscribe witango-talk" in the body.
>
>
>
> ----------------------------------------
>
> To unsubscribe from this list, please send an email to
> [email protected] with "unsubscribe witango-talk" in the body.
>
>


----------------------------------------

To unsubscribe from this list, please send an email to [email protected] 
with "unsubscribe witango-talk" in the body.

Reply via email to