[ Contents | Search | Post | Reply | Next | Previous | Up ]
From: Olivier Mascia
Date: 22 Feb 2002
This suggestion from 'Kevin' in an earlier post dated: 15 Feb 2002 :
"Is it possible to have a second password (which would be stored in the database) for adding/editing the contents? The contents still won't be displayed correctly without the first password, which is not stored anywhere. So the hackers still can't read the contents if it hacked. Just a thought."
looks appealing. It would not change in any way the way the security model of BeSafe is done today. There is just a short pincode or password, to be saved encrypted with the rest of the user data. That pincode is only required to be able to enter, edit or delete data (and of course change the main password). It add a second level of data integrity security. And could certainly be made easily optional for users who would prefer not to use it.
This addition and some import facility (at least from the Notepad) would make me buy BeSafe right away.
Thanks, Olivier Mascia