<div><div>We have a proposal out to a customer who is asking some security questions that I don't fully understand. Can anyone enlighten me about how to answer these?<br></div><br><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
1) Has the application been ethically hacked? If so by whom and can we have a copy of the report?
<br>2) Can the application support SSL?<br>3) Does the application have an API? What security is provided through this?</blockquote><div> </div><br></div>
(or anyway, suggest a reply other than "I'm too blasted ignorant to be your provider?")<br><br>Regarding question #2, I'm pretty sure that the answer is "PmWiki can if the host-server can", correct? Searching the mail-list history, I found a post that mentions using SSL and https, from which I infer that we'd need to ask our host to do something like "setup apache2 to *only* use the
<span id="st" name="st" class="st">SSL</span> connection (so it doesn't respond to http but only https on port 443)". (That's not a PmWiki setting, right?) Is it phrased correctly, to use as a request?<br><br>I do get the part about setting $ScriptUrl and $PubDirUrl to start with https once the server is configured so.
<br><br>Is the answer to #1 no?<br>Is the answer to #3 no?<br><br>Thanks for any guidance!<br><br>Tegan<br>