[htdig] indexing SSL (was: Help building the database)

Avi Rappoport (nets@avirr.com)
Tue, 26 Oct 1999 17:41:15 -0500

If you need to index SSL data (as opposed to empty forms that someone
might want to find), you need to think about security very carefully.
For example, if you're indexing patient records, human resources,
student records, or other confidential information, you should treat
your search index and your SSL results as secure data, or you're
breaking the work that you've done elsewhere

I recommend storing the index on a secure machine with a firewall and
lots of attention, keeping it separate from non-secure data, setting
up access controls such as IP realms or passwords, and encrypting the
results with SSL. This process keeps the index and results almost as
safe as the original data, though any duplication carries a risk.

Just a note of warning!

Avi Rappoport <mailto:avirr@searchtools.com>
Search Tools Consulting: for all your site search and navigation needs
Guide to Site Indexing and Local Search Engines: <http://www.searchtools.com>

To unsubscribe from the htdig mailing list, send a message to
htdig@htdig.org containing the single word unsubscribe in
the SUBJECT of the message.

This archive was generated by hypermail 2.0b3 on Wed Oct 27 1999 - 09:07:46 PDT