Virtual Learning Platforms Thread, Secure Connection, necessary for a learning platform? in Technical; Do others consider it necessary to serve their learning platform to the outside world over a secure connection, or is ...
7th July 2008, 09:18 PM #1
Secure Connection, necessary for a learning platform?
Do others consider it necessary to serve their learning platform to the outside world over a secure connection, or is this really a bit overkill for the type of service it is?
I launched the process of our school choosing a learning platform to our subject leaders today, and immediatly got a barrage of questions I hadn't really prepared for, security of it was one of them!
So what do others do, HTTPS or not?
7th July 2008, 09:19 PM #2
Our Learning platform currently does not work over https however once we incorporate the SIMS Webparts over the summer holidays it will run behind a ISA box and run using https.
7th July 2008, 09:24 PM #3
According to BECTA (who know everything, natch):
When data is required by an authorised user from outside of the school premises – for example by a teacher working from their home –they must have secure remote access
to the management information system (MIS) or learning platform.
Becta Schools - Leadership and Management - Data protection - Information security guidance for schools
They aren't 100% clear on what they mean by secure, but if you don't enforce strong passwords OR use https I think you'd have a hard time describing it as secure. That's not a criticism btw - I know our new VLE will be insecure, but I doubt there is anything we can do to change that other than lobby the provider.
7th July 2008, 09:29 PM #4
7th July 2008, 09:45 PM #5
https helps, but doesn't make it especially secure. It's the authentication you really need to fret about i.e. if you must use them, those passwords.
7th July 2008, 10:03 PM #6
https is an absolute necessity when you have a internet facing server that you expect people to log into with their details.
If a student could get hold of a teachers login through sniffing or man-in-the middle there would be a serious security breach. it is easy to stop this with a simple ssl certificate, I suggest it would be a breach of data protection NOT to use one !
7th July 2008, 10:23 PM #7
7th July 2008, 10:30 PM #8
Last real-world compomise I had some glancing involvement with was done over https - 11 yr-old student had guessed/shoulder-surfed the head's password - head had insisted on being an admin.. fill in the dots.
What between Teacher's home and the school? How are they going to do that? By all means use https because it is helpful, doesn't cost too much and if nothing else will let some folk tick a box that makes them feel all warm/fuzzy, but pragmatically if Student can pull off that MITM in the first place then Teacher is probably already stuffed in 101 other ways.
If a student could get hold of a teachers login through sniffing or man-in-the middle
7th July 2008, 11:22 PM #9
I'm pleased most reponses are pro-HTTPS, as I was fully intending to use it anyway, but I wanted to pose the open question to see what other peoples opinions were.
The risks with passwords will always exist I think, the weakest link is any security chain is always the user! This will be combatted by educating users in good password parctise, turning off the ability to save passwords in web browsers for staff, we will enforce strong passwords when we go live with whatever learning platform we choose, and also they will be forced changed every xx number of days I think, annoying maybe, but necessary - I think so.
Are there any learning platforms on the market that offer authentication other than just a simple password, particulalry for staff and admin accounts? I will be posing the question to the different companies when we approach them to offer us a solution anyway, as with the potential for attendance, assesment data and other information to be contained within the system, I think it could be good to consider security other than just passwords.
By wickit in forum Virtual Learning Platforms
Last Post: 13th November 2009, 01:46 PM
By jumpinjamez in forum Virtual Learning Platforms
Last Post: 28th June 2007, 02:17 PM
By thom in forum Virtual Learning Platforms
Last Post: 4th April 2007, 09:11 AM
By monkeyx in forum Virtual Learning Platforms
Last Post: 27th March 2007, 02:33 PM
By beeswax in forum Virtual Learning Platforms
Last Post: 22nd January 2007, 01:13 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)