[ale] http servers

[Greg]

Stephen;
Here is something that I found that you might be interested in.

>From CERN: "The WN server, by John Franks, deserves special mention in this

regard because its design is distinctively different from other Web servers.
While most servers take a permissive attitude to file distribution, allowing
any document in the document root to be transferred unless it is
specifically forbidden, WN takes a restrictive stance. The server will not
transfer a file unless it has been explicitly placed on a list of allowed
documents. On-the-fly directory listings and other "promiscuous" features
are also disallowed. Information on WN's security features can be found in
its online documentation at: http://hopf.math.nwu.edu/docs/security.html "

>From what I have seen the above system seems to be an improvement on apache

due to it's increased security.  However until I have installed it and
played with it I would suggest Apache on OpenBSD because;

1.	Line by line code auditing (though standard Linux does not offer this)
2.	Simple to configure
3.	Heaps of documentation
4.	Easily expandable to running cgi stuff on.
5.	Open Source.. all of the others that I know of want $ and are
proprietary.


Of course, I just read that the most secure server is to use a stripped down
Macintosh (forgot the server app...maybe Apache ?).

btw, did you know that your email is being sent in HTML ?

Greg Canter


    Something
-----Original Message-----
From: Stephen Turner [mailto:artic_knight at yahoo.com]
To: ale at ale.org
Sent: Sunday, February 17, 2002 9:46 PM
To: ale at ale.org
Subject: [ale] http servers


so for a LFS based system running only the absolute minimum to run https
server (for security reasons), should i use apache or another? and why?




Do You Yahoo!?
Yahoo! Sports - Coverage of the 2002 Olympic Games


---
This message has been sent through the ALE general discussion list.
See http://www.ale.org/mailing-lists.shtml for more info. Problems should be 
sent to listmaster at ale dot org.