Security Features

• Database stored information - A the sensitive information that is stored in hosting helper's MySQL database
  is encrypted using a key specified at installation. Each installation has the ability to specify what they would
  like to use as a key so that there is no duplication between seperate installations.
  
• Interfaces - Hosting Helper does NOT use a special compilation of web server software the has the power to run
  or act as root on your server. Nor does it use root capable wrappers to perform root tasks. Hosting Helper runs as a
  specified user under a normal apache installation and communicates to server daemons on the managed machines.
  
• Server Daemons - To manage functions that require root access the managed machines run background processes
  known as server daemons that the interfaces, client, webmail, and administrative, communicate with to perform
  functions that require "root" access.
  
• Communication Security - The interface to daemon communication security has several tiers to help prevent any
  unauthorized access to your machines. They are configurable both in what port they operate on and key the use for
  encryption. All communications between the interfaces and daemons are encrypted. Each daemon can have a different
  key to even broaden the security. All communications to the daemons are screened an only authorized machines are
  permitted to connect.
  
• Online Transaction Security - The online signup supports Authorize.net and MaxMind credit card fraud screening servics. It also has a built in fraud tracking system to alert administrators of suspicious activities. Online transactions are tracked by IP and mapped to geographic area thru GeoIP if its installed.
  

Created on 2005-03-16 12:08:00 by redragon Updated on 2010-06-10 16:09:46 by redragon