Security

What is it?

The Swekey USB Token is a low cost USB device with a unique signing.
It contains a 32 bit unique hashcode and some software for generating
authentication code sequences based on a random token and the hashcode
on the USB Token itself.
This module integrates the Swekey Token into the Drupal user module, adding
a third level of protection on top of the username and password.

Why should I use it?

If your website or webapplication needs extra protection, or your users
think they need it ;-)

With Brain Forum Moderation you can add "Moderation" field to your
Brain Forum posts.
It creates an ajax link that opens a popup with variety of moderation options when clicked.

Development has just started so it will take some time before even the basic features are ready for production.
You can help by opening feature requests so i can figure out which features are actually needed.
These are some planned features:

This module extends Drupal's core OpenID support to meet the requirements of the GSA/ICAM OpenID 2.0 Profile.

US Government websites wishing to accept OpenID logins for LOA 1 transactions must:

• only accept credentials from Certified Identity Providers, and
• ensure that web sites and applications accepting these credentials are configured to use the GSA/ICAM OpenID profile.

OpenID ICAM Extension provides this extra functionality in one module, designed to work "out of the box" with the default configuration.

Authenticate users based on a chain of enabled authentication plugins. This module enables authentication based on mechanisms provided through a general interface for invoking at boot. This allows for basic HTTP authentication as well as more advanced methods (to be implemented).

Protocol work is underway on the AuthChain website.

PHP Security Info Report

Provides a report that recommends PHP security changes for your site and server.

Powered by PhpSecInfo.

WHAT IS PHPSECINFO?

PHPSecInfo is a PHP environment security auditing tool modeled after the phpsecinfo() function. From a single function call, PHPSecInfo runs a series of tests on your PHP environment to identify potential security issues and offer suggestions. It can be useful as part of a multilayered security approach.

This module provides a new captcha mechanism. Based on Captcha module.

You can watch demos here.

This project was created in response to the Production check & Production monitor project (http://drupal.org/project/prod_check) test concerning the /nope page being enabled in Drupal's menu system

See: #1033574: Check if /node is accessible

This is a simple module which forces all your site's webforms and webform submission results to be automatically viewed and submitted entirely via SSL (i.e., at a URL beginning with https://).

It is useful if you are using the Webform module to collect information from your visitors and you want those submissions to be dealt with securely (e.g., for privacy reasons).

Permission watchdog logs all changes to permissions on roles so an administrator can audit the entire history of changes to permissions. This is useful for sites or applications which have security audit requirements to illustrate what permissions a role had at any given point in time.

This project

This is a sandbox project for allowing mobile tools and secure pages to work together.

It simply avoids storing the URL configuration to the database, so it can be set via settings.php . (securepages_basepath, securepages_basepath_ssl, mobile_tools_mobile_url, mobile_tools_desktop_url.