RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Matthew Macdonald-Wallace
Personally, I do not believe that you will ever have completely secure data, however one way you could do it is as follows: 1) Use Linux [0] 2) Purchase a copy of "Hardening Linux" and "Hardening Apache" [1] 3) Use LUKS or similar to encrypt the hard-disk of the server so that even if the physical

RE: [wdvltalk] Securing web traffic

2008-01-15 Thread Ross Clutterbuck
Thanks for the replies so far. It seems we're all saying use SSL over HTTP to secure the connection for the entire session. Now, how do I actually go about doing this? MOU • The WDVL Discussion List from WDVL.COM • To Join wdvltalk, Send An Email To: mailto:[EMAIL PROTECTED] or use the

Re: [wdvltalk] Securing web traffic

2008-01-15 Thread David Precious
I agree whole-heartedly with Matt's response - nice one. However, one extra addition: Matthew Macdonald-Wallace wrote: > 6) If you need to have the system run over more than one server, run the > connections between the Apache/PHP (front-end) and the MySQL (backend) > servers over an ssh tunnel