Update README to remove password hashing section and add read-only sharing links for inquiries; simplify inquiry template by always displaying refresh notice.

This commit is contained in:
Minecon724 2025-04-02 13:22:48 +02:00
commit 213e1c1e86
Signed by: Minecon724
GPG key ID: A02E6E67AB961189
2 changed files with 10 additions and 11 deletions

View file

@ -141,12 +141,6 @@ The following security enhancements are planned for future releases:
- Implement rate limiting for failed login attempts
- Add IP-based blocking after multiple failed attempts
### Password Hashing
- [ ] Replace SHA-256 with Argon2 password hashing
- Argon2 is the winner of the Password Hashing Competition and provides better protection against various attacks
- Implement password migration strategy for existing accounts
- Update password verification logic to support both hash formats during transition
### Authentication Methods
- [ ] Add OAuth 2.0 support for admin authentication
- Integrate with common providers (Google, GitHub, Microsoft)
@ -160,3 +154,10 @@ The following security enhancements are planned for future releases:
- Automatically delete closed inquiries after 2 days
- Allow reopening inquiries before deletion occurs
- Provide visual indicators for closed inquiries in admin interface
### Read-Only Links
- [ ] Implement read-only sharing links for inquiries
- Generate unique, cryptographically secure sharing links
- Allow users to create links that provide view-only access
- Set optional expiration times for sharing links
- Allow users to revoke sharing links at any time

View file

@ -51,11 +51,9 @@
{% endif %}
</div>
{% if not is_admin %}
<div class="refresh-notice">
<p><em>Please refresh the page to see new messages.</em></p>
</div>
{% endif %}
<div class="refresh-notice">
<p><em>Please refresh the page to see new messages.</em></p>
</div>
<div class="reply-form">
<h3>{% if is_admin %}Respond as Admin{% else %}Reply{% endif %}</h3>