Nothing to install. Nothing to patch.
RDO Selector is a web app that runs on Cloudflare's global network. Your department needs nothing but a browser and access to your board's address.
Cloudflare Workers
The app and its data run on Cloudflare Workers with a Durable Object for storage. There are no servers or databases to maintain.
HTTPS only
All traffic is encrypted. Strict Transport Security is on, and live updates use secure WebSockets.
Personal PINs
PINs are stored only as salted hashes. Sign-ins use signed, expiring tokens, and changing a PIN signs out every other device.
Checked on the server
Every change is checked by the server for role, watch and deadline. Data for boards a person can't see is never sent to their device.
Locked-down pages
A strict Content Security Policy, no framing, no third-party scripts, and no referrer leaks.
Bad PIN log
Wrong PINs and lockouts are logged with time, name tried, network address and device.
Need a full technical write-up for a firewall or security review? Email support@rdopicker.com and we'll send the hosting and security document.