SecurityModel

To try and achieve some level of security, sensitive information should be transmitted over secure channels. To wit this means logins, file uploads, adminstrative screens, and user password/public key screens should be over ssl.

This is done via openssl and ns_openssl to create https connections to the repository and via registration with the acs request processor that all admin and user login pages are restricted to ssl. We piggy back on the work already done by the acs as documented here http://developer.arsdigita.com/doc/security-design.html

info re package signing and pki should go here