Brian Masinick
This is a good discussion and regardless of the next update we’ve already made a few improvements.
I do think that the more functionality we can accomplish with ordinary user privileges the more secure the overall approach is. Even when occasional elevated privileges are necessary an authentication step should take place.
Yes, it’s inconvenient to have to authenticate multiple times a day but it beats getting hacked.
I wonder if there is a way to establish an authentication key that remains until the user either logs out or locks the screen, then when logging in or unlocking a new key is created. Each time a lock or logout occurs the key is purged.
Thoughts on this and the overall balance of secure authentication and standard user access most of the time?
--
Brian Masinick
Alternate "Search B":
This search page