I'd like to know if DNN has the kind of security, including restricting access to content by user roles, that would satisfy clients such as law enforcement agencies and law firms that usually use private networks for their sensitive information. That is, could a good case be made for that in spite of DNN sites being hosted on that "known-to-be-not-secure" internet.

Mick,

Firstly I would agree that DotNetNuke itself is secure enough to satisfy the likes of people who are weary to have their information on the web.

Secondly, here are some helpful links I rounded up for further information:

• This site has quite a bit of DNN security informatin/comparisons
• There are two links to security related white papers at the bottom of this DNN Security Overview page
• Here is a tutorial on DotNetNuke security roles

Take care,

Ian