Uploading data with a revlet (Was: Re: Is it possible to change the revlet embed html?)

Medard liste.revo at medard.on-rev.com
Wed Dec 9 09:36:27 EST 2009


Mark Talluto <userev at canelasoftware.com> wrote:

> Many hosted web accounts these days do not allow anonymous FTP.  If yours
> does then that may be the way to go.  Since we do not have sFTP then
> your password and other login parameters are being sent unprotected.
> You are vulnerable to man in the middle attacks.  If this app is used
> where security is required by your clients then this can cause a problem
> for you on the marketing end.

Hi! I am changing from Dom to Medard (On-Rev hosted address) :-)

Even I am not concerned about client/marketeer problems, I do think it
is a problem, as the revlet has to send those parameter over the net...

Your "man in the middle" remark has to be taken seriously!

Even for a simple hobbyist, which makes revlets available on the net ;-)

-- 
Dom^W Medard





More information about the Use-livecode mailing list