Confirmed users
1,927
edits
| Line 38: | Line 38: | ||
** Enable SSL by default in clients. | ** Enable SSL by default in clients. | ||
** Close non-SSL port eventually? | ** Close non-SSL port eventually? | ||
* Partition services into different vhosts, one user with write permissions per vhost. Configure existing shims appropriately. | * (maybe?) Partition services into different vhosts, one user with write permissions per vhost. Configure existing shims appropriately. | ||
** For simplicity and to ease upgrades, the vhost should be coded into the mozillapulse publishers and consumers. | ** For simplicity and to ease upgrades, the vhost should be coded into the mozillapulse publishers and consumers. | ||
** Although, if we implement a relatively fine-grained security model with naming conventions (see Security Model section below), vhost separation may not even be required. It would make setting up consumer accounts more annoying (having to specify all the vhosts your apps may need). | |||
** PulseGuardian will have to be updated for this. | ** PulseGuardian will have to be updated for this. | ||
* After a grace period following PulseGuardian's launch, remove the "public" user. | * After a grace period following PulseGuardian's launch, remove the "public" user. | ||