Mailinglist Archive: opensuse-edu (172 mails)

["Mark Evans" <mpe@xxxxxxxxxxxxxxxxxxxxxxxxxxx>]

> On Tue, 27 Nov 2001, Alan Harris wrote:
> > Hi all,
> > thought you guys/gals might be interested in this little conversation of
> > mine regarding the transfer of exam entry data via edi with dialnet :-
> > -----reply from dialnet-----
> > > as stated in the Requirements, WebXchange requires Internet Explorer 4 or
> > > greater. The reason is explained on the Support page:
> > > Q: Why can't I use the Netscape web browser?
> > > A: WebXchange uses Microsoft's Active-X technology to allow the transparent
> > > transfer of files from and to your computer hard drive, which Netscape
> > > browsers do not natively support.
> > Any thoughts?
> 
> How about:
> 
> "Dear Mr Moran,
> 
> Personally, I prefer to avoid using web technologies that can
> transparently transfer files from and to my computer's hard drive.  Some
> computers that I use hold information that is confidential, such as
> medical details, and I would be violating various laws[1] if I were not to
> take reasonable precautions to protect this information.
> 
> I am afraid that it may not be possible to legally use your service
> without setting up a computer dedicated only to the task of transferring
> exam entry data and not connected to any other computer.  This is clearly
> not an acceptable solution.
> 
> If you are unable to provide a safe alternative to the ActiveX technology,
> then I will be forced to take my business elsewhere and to contact your
> existing customers to inform them that they may be breaking the law by

Probably better to report to the information commisioner (or whatever her
title is this month), trading standards and the press.

> continuing to use your service, and to suggest an alternative provider for
> the service.
> 
> If you do not have the in-house skills required to implement a safe and
> secure solution, then I can recommend several consultants who would be
> able to advise you.

It's hardly the most complex of tasks... The difficult bit IMHO
would be writing something to run under Windows (simply on the basis
that the relevent tools are addons.) It gets a little more complex
if you want to do something like end to end encryption and digital
signing. Since you then need a mechanism for schools to know the exam
boards' public keys and exam boards to know schools' public keys. 


-- 
Mark Evans
St. Peter's CofE High School
Phone: +44 1392 204764 X109
Fax: +44 1392 204763