Imported from a post on Get Satisfaction : http://getsatisfaction.com/iformbuilder/topics/media_security
I'd like to discuss the topic of media security and iFormBuilder. The question comes up every few months, so I figured this was a good time to put an FAQ together... If you still have additional questions, please post them below and we will do our best to answer promptly.
1. Where are the media files stored?
A: As of June 2012, media files are stored either in Cloud Files (hosted by Rackspace) or a user defined media location.
2. Why don't you password protect the URL?
A: The URL of each media file is stored in a data file that requires an iFormBuilder Username and Password with Viewing rights to that form to retrieve. The name of each file is randomly generated, so people can't guess the links to see the media, unless you provide them with the link.
3. What benefit does "https" provide if the file names are randomly generated?
A: Data transferred over "https" cannot be tampered with or sniffed into.
4. If I delete record from iFormBuilder what happens to my media?
A: When you delete records from iFormBuilder any related media files will be deleted as well. If you are storing media in dropbox, you can restore the deleted file to the dropbox account.