[thelist] asp/sql security

[Matt Warden]

Brian,

Will these apps only ever be accessed from within your internal
network, or do the "right people" need to be able to access them from
home, etc.

If the former, you can just block out all non-local IP addresses and
bypass the need for a password altogether. Of course, if the data is
*highly* sensitive, you probably don't want to only limit by local IP,
because a black hat could bring a laptop to your facility and hook
into your network, then have free access to it all.


Thanks,

On Wed, 13 Oct 2004 11:59:50 -0400, Brian Delaney
<brian.delaney at mccmh.net> wrote:
> On my new Intranet web site I have added a couple applications.
> 
> I do not want the general public to be able to access the apps.



-- 
Matt Warden
Miami University
Oxford, OH
http://mattwarden.com


This email proudly and graciously contributes to entropy.