One of the things that security people always say is that the first stepin doing a decent security analysis is to figure out your threat model . So, what is the threatmodel for website logins, in other words what sort of attacks are youlikely to face that you need to defend against?

My belief is that there are two or maybe three significant threats thesedays:

• phishing, for which the best defense is getting your users out of thehabit of entering their passwords at all; either have them logged on

I wrote up our basic fileserver design plan back in ZFSFileserverDesign , but it is worth explaining why we are lookingat using many pools. In a nutshell:

Given that we sell fixed size chunks of space to people (as the waywe allocate our storage space), we are always going to have a certainnumber of logical pools of storage to manage. The only question iswhether to handle them as separate ZFS pools or to aggregate them intofewer ZFS pools and then administer them as sub-hierarchies using quotas .