Ok, I understand this. But what if only verified users can use zammad from “verified” machines in our internal network… all machines are secured by a antivirus and the network by an powerfull firewall.
I don’t see a risk here and zammad should focus on functionality or?
Don’t get me wrong… zammad is a great but from an admin perspective I need to tell my users, that there is not even an option for me to enable something like this. And I’m not the first one here asking for something like that.
So I like the idea of “default security”, but I think it would be great if the admins could decide weather or not they want to set up zammad.