Hello all,
I want to use SuperContainer along with Instant Web Publishing and am concerned about the security of the data hosted on SuperContainer. My initial plan is that an email will go out to a remote IWP user alerting them to log in and look at a file. The user would then navigate to our public website, log in via a standard FileMaker account through IWP, and be able to view a few records with SuperContainer web viewers showing the files we have uploaded for them.
However, the data that would be hosted on SuperContainer is highly confidential stuff. Could anyone talk to me in general about why SuperContainer is safe or unsafe for this purpose? We are using SuperContainer hosting from the mothership... aka 360Works ... and it has been working great so far.
My understanding is that ANYONE with the exact SuperContainer reference link can access the file. So, I've built my SuperContainer references/links with huge long random strings (using UUID function), so no one would be able to guess another file's directory. This seems to add a layer of security that would be very hard to get around.
However, this still makes me nervous! Again, anyone with that link -- even if they don't log in to FM IWP -- is able to get at the file. It makes me nervous that somehow Google or another search engine could somehow find it and we would be in big trouble. Is there any additional layer of security I could use with SuperContainer that I am overlooking?
(The login/pass system used by SuperContainer seems like it would be an option, but since I would have to be using the same login/pass for all accounts, I don't see how this is any more secure than just having VERY random links...)
Thank you, thank you, thank you in advance!
-Stephen