We'd VERY much like to hear about his concerns, suggestions for improvements, etc.
For three reasons, really, but I'll save the best for last. I'd really appreciate it if he gave
me a call, shoot me an email, or caught me on ICQ.
[email protected],
ICQ 7208627, or phone 979-530-1300.
It may very well be that if he talked to us for a few minutes we could give him exactly
what he's looking for.
It's also common that webmasters say "I don't think I can use Strongbox for this because
I want to use ______ (Nats/Wordpress/whatever), and we reply "there's a setting
for that in the Strongbox config". Then the webmaster is really happy to find out we
have a setting for whatever they want to do - and do it better/easier than they planned
on doing it.
The biggest reason I like to talk to webmasters, though, is that very often a short
conversation will avoid a big problem for them. 98% of the time if a webmaster says
"I wish you had this feature" we tell them or show them exactly why we don't do that
and why they really don't want to. We'll pull up a site running PennyFrogPass or
whatever system they are referring to and show them how a hacker uses the "feature"
to dump the full list of passwords just like that. Of our three main "competitors", two
have "features" that are actually giant security holes and it's good for webmasters to
understand those significant issues before using those "features".
That reminds me, George, if I forget to get in touch with you guys in the next couple of
weeks remind me. Based on what the hackers are doing recently, we made an
important security update recently and I think you guys may need to make a similar
change. Whenever I get a free minute I plan to double check your code for that
one and another concern and I'll let you know if in fact I see something major. I've
just been so busy I haven't had time to look.