If you need to index SSL data (as opposed to empty forms that someone 
might want to find), you need to think about security very carefully. 
For example, if you're indexing patient records, human resources, 
student records, or other confidential information, you should treat 
your search index and your SSL results as secure data, or you're 
breaking the work that you've done elsewhere

I recommend storing the index on a secure machine with a firewall and 
lots of attention, keeping it separate from non-secure data, setting 
up access controls such as IP realms or passwords, and encrypting the 
results with SSL.  This process keeps the index and results almost as 
safe as the original data, though any duplication carries a risk.

Just a note of warning!

Avi
________________________________________________________________
Avi Rappoport <mailto:[EMAIL PROTECTED]>
Search Tools Consulting: for all your site search and navigation needs
Guide to Site Indexing and Local Search Engines: <http://www.searchtools.com>

------------------------------------
To unsubscribe from the htdig mailing list, send a message to
[EMAIL PROTECTED] containing the single word unsubscribe in
the SUBJECT of the message.

Reply via email to