More in this section

Forums / General Discussions / Newsletter Security (Data Protection Act)

Newsletter Security (Data Protection Act)

3 posts, 1 answered
  1. Robert
    Robert avatar
    26 posts
    Registered:
    19 Mar 2011
    04 May 2011
    Link to this post
    Good evening,

    Is there any information floating about on how secure the Sitefinity newsletter module is?
    For example, in the UK we have to conform to the data protection act to insure customer personal information is safe and secure.

    Some information on what is expected for a company holding data can be found here http://www.ico.gov.uk/for_organisations/data_protection/security_measures.aspx

    One of the points mentioned is that they recommend that personal data is stored in an encrypted form. Does the sitefinity newletter module encrypt stored data when users sign up etc?

    I understand that there are a load of server side measures that have to / can be taken to insure data is protected, but I was just wondering if there are any security measures that the sitefinity newsletter module has built in to further secure the data?

    Any information on this matter is greatly appreciated.

    Thank you for your time,

    Rob
  2. Ivan Dimitrov
    Ivan Dimitrov avatar
    16072 posts
    Registered:
    12 Sep 2017
    04 May 2011
    Link to this post
    Hi Robert,

    We do not encrypt the data. In its basis the module uses System.Net.Mail.SmtpClient. The SMTP settings are saved inside App_Data/Sitefinity/Configuration/SystemConfig.config file, but they are not encrypted this is something that we have to do.

    Regards,
    Ivan Dimitrov
    the Telerik team
    Do you want to have your say in the Sitefinity development roadmap? Do you want to know when a feature you requested is added or when a bug fixed? Explore the Telerik Public Issue Tracking system and vote to affect the priority of the items
    Answered
  3. Robert
    Robert avatar
    26 posts
    Registered:
    19 Mar 2011
    10 May 2011
    Link to this post
    Thank you very much for your response.

    Encryption would be a great little feature to have. It would certainly bring that extra peace of mind.
3 posts, 1 answered