D
Dev
Chris said:Oh dear. I hope I haven't discouraged you.
Maybe you could put this together as a sort of proof-of-concept. You'd be able
to say "it all works, but before we can deploy it for real, we have to arrange
for proper security with a real SSL certificate and a properly secured and
administered database". So your version would either not use SSL at all (but
have the hooks to put it in easily) or would use SSL with a free, self-signed,
certificate. Similarly, you would not need a "real" secure database (in secure
environment, with physically and logically restricted access, etc), but your
code would "talk" to your DB in just the same way as it would if the DB were
properly secured.
-- chris
No, you haven't discouraged me at all. I am glad to find out that much
less has been done in this regard and whatever constructive I do will
add to building something new. Just another addition to the lists of
tasks, and one which has lower priority for the moment.
Thanks!