5
votes
2answers
218 views

Configuring election website to prevent MITM attacks

Consider an election web site that will be used for voting over the Internet. What steps should the administrator of such a web site take to provide adequate security against man-in-the-middle attacks ...
5
votes
5answers
432 views

Any value in a web-server closing connections on bad requests (or bad pages)?

At least one web-server, nginx, has the ability to "close the connection without sending any headers", by configuring it to return a (nonstandard) 444 to various malformed HTTP requests. Is there any ...
12
votes
2answers
268 views

What is the best way to verify the SSL configuration of my web server?

How do I ensure I have my SSL configuration setup securely?
75
votes
14answers
16k views

Apache Server Hardening

What are some best practices, recommendations, required reading for securing an Apache Server?