...
Encrypted passwords should be considered not more than disguised to protect them from inadvertently getting disclosed. To properly protect the passwords, access to the database must database must be limited to limited to the platform application.
...
| Info | ||
|---|---|---|
| ||
Due to the nature of email encryption, please note that this method can currently only provide encryption of the message body. The message meta data, like sender and recipient always remain unencrypted which is just like with a real-world package sent out via some postal service. However, you should be aware that also the also the message subject is always sent unencrypted, unless you configure S/Notify to use its special feature to secure the mail subject. This warning applies to both, S/MIME and PGP.We know that there are proposals and even implementations that can encrypt headers as well. However, as the client support is not very good or even non-existing yet, S/Notify does not currently support such extensions. |
Data access
Data access is managed by the platform application's user access rights management. Unless configured otherwise, usually
...