Apache vs Tomcat WRT Security

2005-05-19 Thread Mark
I was very interested in the discussion concerning Apache vs Tomcat WRT Performance. While I cannot argue with the performance numbers, I do like putting Apache in front of Tomcat for 2 reasons that I have found so far. 1. SSL. If I am going to be serving pages whether they be dynamic or

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread David Smith
I won't argue with no. 1 since I don't use SSL connectors in Tomcat. However, no. 2 can be mitigated with the commons-daemon project among other tricks and IMHO, not a valid argument against having Tomcat out front. Just my thoughts on the subject. :-) -David Mark wrote: I was very interested

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Remy Maucherat
On 5/19/05, Mark [EMAIL PROTECTED] wrote: I was very interested in the discussion concerning Apache vs Tomcat WRT Performance. While I cannot argue with the performance numbers, I do like putting Apache in front of Tomcat for 2 reasons that I have found so far. 1. SSL. If I am going to be

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Peter Lin
I don't know about others, but I prefer to run tomcat on port 8080 and then setup the router to redirect port 80 to 8080. it's rather easy to setup these days. peter On 5/19/05, Remy Maucherat [EMAIL PROTECTED] wrote: On 5/19/05, Mark [EMAIL PROTECTED] wrote: I was very interested in the

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Mark
OK, so I will admit that I am out of the loop with regards to #2. But I still have an issue with storing and passwords required to open key files in the clear. Is there some function that will handle this for me... On 5/19/05, Peter Lin [EMAIL PROTECTED] wrote: I don't know about others, but

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Mark Thomas
Mark wrote: OK, so I will admit that I am out of the loop with regards to #2. But I still have an issue with storing and passwords required to open key files in the clear. Is there some function that will handle this for me... Assuming that the file is sensibly protected with OS security if an

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Pete Stevens
On Thu, 19 May 2005, Mark wrote: I was very interested in the discussion concerning Apache vs Tomcat WRT Performance. While I cannot argue with the performance numbers, I do like putting Apache in front of Tomcat for 2 reasons that I have found so far. 1. SSL. If I am going to be serving

Re: Apache vs Tomcat WRT Security

2005-05-19 Thread Nikola Milutinovic
David Smith wrote: I won't argue with no. 1 since I don't use SSL connectors in Tomcat. However, no. 2 can be mitigated with the commons-daemon project among other tricks and IMHO, not a valid argument against having Tomcat out front. Just my thoughts on the subject. :-) I'll just add to the