Re: Tomcat 5 and 6 Security advise

2007-07-26 Thread Craig Skinner
On Thu, Jul 26, 2007 at 03:24:28PM +0300, Peter Stavrinides wrote: > It makes for interesting reading, however it was written for Tomcat 4... > how current is it?? and nothing is mentioned about the benefits of > running Apache with Tomcat for securing Tomcat in a purely Java > environment, plea

Re: Tomcat 5 and 6 Security advise

2007-07-26 Thread Peter Stavrinides
PROTECTED] Subject: Re: Tomcat 5 and 6 Security advise and nothing is mentioned about the benefits of running Apache with Tomcat for securing Tomcat in a purely Java environment Adding layers generally doesn't improve security - it just provides additional targets. Some things

RE: Tomcat 5 and 6 Security advise

2007-07-26 Thread Caldarale, Charles R
> From: Peter Stavrinides [mailto:[EMAIL PROTECTED] > Subject: Re: Tomcat 5 and 6 Security advise > > and nothing is mentioned about the benefits of > running Apache with Tomcat for securing Tomcat > in a purely Java environment Adding layers generally doesn't imp

Re: Tomcat 5 and 6 Security advise

2007-07-26 Thread Peter Stavrinides
It makes for interesting reading, however it was written for Tomcat 4... how current is it?? and nothing is mentioned about the benefits of running Apache with Tomcat for securing Tomcat in a purely Java environment, please read the question Craig! Craig Skinner wrote: On Thu, Jul 26, 2007

Re: Tomcat 5 and 6 Security advise

2007-07-26 Thread Craig Skinner
On Thu, Jul 26, 2007 at 10:51:01AM +0300, Peter Stavrinides wrote: > Hi all, > > I need some advice with regards to Tomcat security, http://www.oreilly.com/catalog/tomcat/chapter/ch06.pdf - To start a new topic, e-mail: users@t

Tomcat 5 and 6 Security advise

2007-07-26 Thread Peter Stavrinides
Hi all, I need some advice with regards to Tomcat security, my company is not convinced about Tomcat's security, I work for a financial institution so you might understand their paranoia. My question is how best to secure a Java servlet that runs on Tomcat. Requests are routed through front