Quote:
Originally Posted by plsureking
integrated user management is a much better option. how can you manage a member's usage stats and account info if you are outsourcing security? do gmail and facebook use 3rd party sign in?
3rd party login scripts are fine if you aren't using a cms, but it should be a standard feature of any professional cms. we've had login management since version 0.1. its basic functionality.
|
I am nowhere near egotistical enough to compare Elevated X to Google or Facebook and if you believe your own security methods are on par with theirs, that's impressive.
We have a free, very basic login and auth mechanism for smaller sites who don't want to pay for something like ProxyPass - which BTW also does not handle the member data or manage the members - But we have not opted to go beyond that and feel this to be good business. Storing that kind of data online is extremely risky for a CMS client and for all collective clients should there be a wide scale breach.
As I eluded to above, when you have as high profile clientele as we do, the value in someone hacking them goes way up and along with it, so does our liability. How valuable is the member data of 10 of your most prized clients combined in comparison to say, the collective member data of sites like Playboy, Playgirl or those run by Gamelink that use Elevated X? We and our users are being hit nonstop, every single day.
This is also why we and our clients rely on web hosts instead of self-hosting and why clients that size pay what they do for managed hosting from sources like NationalNet, MojoHost, ISPrime or work with someone like Dweeks at Swiftwill who not only has experience dealing with YouPorn or Pornhub level traffic and hack attempts but also prides themselves on their security. We'd never pretend to be able to provide clients anywhere remotely comparable to that on a hosting level. If this makes Elevated X inferior to you in your mind, I'm okay with that.
Until we are confident that we can do the membership/content protection job as well or better than ProxyPass, we will continue not to have integrated membership management and site security features.
It's good if it makes you you feel superior and that your self-made security system suits your needs but until we can do it better than they can, I sleep much better at night knowing my clients' sites are protected by someone who is a true expert in that area.
We'll have to just agree to disagree on what's a negative or a lacking feature.
AJ