[ZendTo] Re: Security Feature Request

[Marlon R Deerr]

Sounds like a good security measure, however this will not work if you're sending a drop off for a large distribution list. I sure won't be calling 100+ individuals by phone to give them a password. One of the main benefits of this type of service is to help remove overhead from your mail server when sending to large amounts of recipients, so while this added security measure (if implemented) helps for small number of recipients, it won't work for large ones. Just my 2cents 
-------- Original Message -------- From: Alexander Fisher Sent: Tue, Mar 13, 2012 11:47 AM To: ZendTo Users CC: Subject: [ZendTo] Re: Security Feature Request On 13 March 2012 15:04, Phil Daws <uxbod at splatnix.net> wrote:
> I see where the OP is coming from and it is a tricky one to resolve as even sending a passcode manually may be intercepted in transit; unless you mean with that checkbox ticked that it would only include the claim id and annotate the dropoff_email.tpl with an additional message that they should expect a call with the necessary passcode ?

Yep, that's exactly the sort of way I was imagining it could work.
Obviously, sending the passcode in a separate mail gains you very very
little extra security, but over the phone or perhaps even by text
message would be a step up.  It provides two factor authentication.

In fact, having just had that thought, automatically being able to
send the passcode via text message could be very neat.  Or is it just
feature creep with hardly any users!? :)

Kind Regards,
Alex

_______________________________________________
ZendTo mailing list
ZendTo at zend.to
http://mailman.ecs.soton.ac.uk/mailman/listinfo/zendto