AAJ has made
significant efforts to ensure that certain portions of Justice.org,
as a member service, are available only to AAJ members.
Significant areas of Justice.org are restricted by member
type. Never the less, Justice.org and its list servers should
not be regarded as a secure system and should never
be used for anything that should be confidential in nature.
First, Justice.org as a member benefit is available to AAJ members based
only on their membership. AAJ accepts member applications based
on the applicant's signature without any other verification. As
long as Justice.org is available as a member service, all
of the technical measures that could conceivably be applied to Justice.org will never make it secure without dramatic changes in
all of AAJ's policies and procedures related to membership.
Second, most
communications with Justice.org are not encrypted and pass
through other computer systems which neither AAJ nor the Justice.org user members have knowledge of or control over. Most
of our web forms that accept credit card numbers, now do have a
Secure Sockets Layer (encrypted) option to protect the privacy of
your credit card information.
Third, Justice.org is an Internet web site. The computer on which all Justice.org content is stored is directly connected to the Internet
and is accessible via HTTP and FTP. We believe that we have taken
security measures appropriate for a publicly accessible web site
but no such computer, should be considered secure. Even if we have
taken every possible precaution against all known attacks, and we
have NOT, new avenues of attacking exposed computers are found regularly.
As all information on Justice.org is backed up regularly
and most is derived from other computers where it remains available
and the obvious avenue of attack is via AAJ membership, we do not
feel that any useful purpose is served by taking extraordinary procedures
that would be expensive, time consuming and make Justice.org
less convenient to use, develop and administer. The only reasonable
assumption is that a knowledgeable and determined hacker can break
into such a system.