This question will most likely need to be answered by someone from Netcall:
Although the option to have either ‘ID’ or ‘ID and Hash’ as the setting for ‘Record identifier in URLs’ (under ‘Other Security Settings’ in ‘Security Policy’) is available, is it the intention - given that using the ‘ID’ option has been identified as a potential security flaw - to make ‘ID and Hash’ mandatory at some point? That is, you don’t have the option to continue using the ‘ID’ option anymore and the ‘ID and Hash’ option is the default behaviour for how record identifiers are formed in Liberty Create.
At Adur & Worthing Councils we are planning on upgrading all of our Liberty Create environments soon and this has raised the issue of whether there will come a time when an upgrade will no longer feature the ability to continue using the ‘ID’ option for the ‘Record identifier in URLs’ setting.
If there are plans to phase out the ‘ID’ option, is it possible to provide a future Liberty Create version number when that option will no longer apply? If the ‘ID’ option will still be available in future versions of Liberty Create then knowing this will also be helpful.
Thanks for any further information about this you can supply.