All things being equal, all things are not equal!

• Control is the name of the game
  
  • Unauthenticated users to GV may purchase village products via paypal and may leave comments in an approval queue in plain text only
    
  • Authenticated, free accounts get to comment without approval but have little more access than visitors – 'cept they are getting live content
    
  • While PHP filters are available, they are limited to Business accounts starting at $75/month – (requires approval cycle; enforced via workflow)
    • No guarantee of good behaviour but low risk
      

The more you pay the more you play

• Security begins at home!
  • Members aren't the enemy, they are to be protected!
    
  • Secure pages, ridgid IT procedures, OpenPGP, Linux (Ubuntu), only SSH access to servers (using RSA auth exclusively), HTTPS always available (and encouraged)
  • Access Controls always in effect -- no open API; contractural obligations are necessary but insufficient