We host a neat little SP 2010 solution, my coworker and I developed, on the net. On the root site, you have some news and a login-webpart. (FBA) For everything else, you need to be logged-in.
So far, so good. The only thing we didn't thought of was, that the "user information list" is on the site, too. We stumbled upon this problem when we found some email-adresses and other information from the list on google!
For now we have forbidden the anonymous access, which works for us just fine, but our boss and some clients who have interest in this project want the "welcome"/login-page back.
Is there some work-around? Like setting the anonymous access on a seperate page only?