Re: Most secure web server


Geoff wrote:
Thanks for the advice guys!

On Jan 7, 1:45 am, Ertugrul Soeylemez <n...@xxxxxxxxxxxxxx> wrote:
"Geoff" <hotf...@xxxxxxxxx> (07-01-06 05:55:40):

Does anyone have any advice in choosing the most secure web server
possible? Apache is often used, but has many features which are not
needed. Being heavy-weight is more likely to introduce exploits. What
do you think of any alternatives to apache or am I wrong to think this
about Apache?The Apache core itself is just a simple implementation of HTTP, a
configuration parser, and a server socket (maybe a few more things).
Even multitasking is a separate feature. So take Ken's advice, and
don't load modules for features you don't need.

A lot has been left out: Apache is fully featured: there are tools
available for all sorts of things which you may not need (such as PHP
and MySQL) and for things that are very useful for security (such as
SSL, and local Kerberos authentication). Using a good webserver is not
enough to be secure: I highly recommend goiing over what you need with
someone comfortable with your particular server to walk you through the
booby traps.

.

Relevant Pages

  • Re: Most secure web server
    ... Apache is often used, but has many features ... and a server socket (maybe a few more ... and don't load modules for features you don't need. ... You're talking about security and PHP in the same paragraph, ...
    (comp.os.linux.security)
  • Re: Linux web server - dedicated builds/distros
    ... find out what exactly is enabled, what features are supported, etc... ... etc) I wrote my own web server - at least I know exactly how it is working ... And that is excatly why I use Apache on also the simple things. ... install php, drop the files in /srv/www/htdocs and I'm a happy camper. ...
    (alt.os.linux.suse)
  • Re: Most secure web server
    ... Apache is often used, but has many features which are not ... Being heavy-weight is more likely to introduce exploits. ... don't load modules for features you don't need. ...
    (comp.os.linux.security)
  • Re: Relay Pages: Incoming to old IIS URL -> Request to new PHP Server for content -> Out to
    ... I created a reverse proxy system with Apache using mod_perl a long time ... Perhaps you could use the Apache 2 features for proxying as they ... server set up as a reverse proxy with the gzip compression features on. ...
    (microsoft.public.dotnet.framework.aspnet)
  • ANNOUNCE: Mod_python 3.2.2 Beta
    ... The Apache Software Foundation and The Apache HTTP Server Project are ... Version 3.2.2b of mod_python features several new functions and attributes providing better access to apache internals, file-based sessions and other session improvements, as well as many bug fixes and various performance and security improvements. ... Preferred method of reporting problems is the mod_python user list ...
    (comp.lang.python)