VaultMode
From Wikanual
VaultMode
INTERDUBS is a secure system. At no point can the system being penetrated from the outside.
But direct links can leak for instance. There are trade offs between end user comfort and security.
The Vault Mode look set settings to their most secure values.
Contents |
a look for security
INTERDUBS looks are collections of settings. They after often used for design purposes. But since the same mechanism controls all settings of the end users client experience it can also be used to maximize settings in a desired direction. In case of the VaultMode look the direction is security.
It contains the following settings:
https
An encrypted connection is enforced
Asset links only work on INTERDUBS pages
All links to actual assets are being generated and only work when used on INTERDUBS pages. No deep linking possible.
referrer match will auto expire login
If a link from a page is detected then the login will automatically expired and the owner of the link notified. See referrer match and auto expiration for details.
user name / password
Even on direct links another user name and password request will be issued for each session.
download disabled
Download options in page and for the quicktime itself well will be disabled.
iPhone view disabled
iPhone see the same than normal browsers, since their presentation contains some inherent insecurities.
using VaultMode with other looks
You can combine several looks in a so called look stack. The order of when looks will be applied is controlled by an index number. Settings will be evaluated from lower numbers to higher ones. The actual look has the 'index 0'. If you like to ensure that all security settings from VaultMode apply then you need to give it the highest index numbers of all looks in a stack.
Technology limitations
Please note that NO SYSTEM IN THE WORLD could prevent an attack that would grab pixels directly from the display. Just imagine a very decent camera filming a screen under good conditions. If your eyes can see it (and your ears can hear it) then technology exists to capture that content.
