1. Introduction

TODO

Unsorted collection of TODO topics:

• the Provisioning API should only be accessible from the IP addresses of school authorities

  • via packet filter (iptables) and/or via Apache configuration (allow from .../deny ...)

• the Self-disclosure API should only be accessible from the IP addresses of the service providers (e.g. Bettermarks)

  • via packet filter (iptables) and/or via Apache configuration (allow from .../deny ...)