5
votes
2answers
199 views

Configuring election website to prevent MITM attacks

Consider an election web site that will be used for voting over the Internet. What steps should the administrator of such a web site take to provide adequate security against man-in-the-middle attacks ...
5
votes
5answers
394 views

Any value in a web-server closing connections on bad requests (or bad pages)?

At least one web-server, nginx, has the ability to "close the connection without sending any headers", by configuring it to return a (nonstandard) 444 to various malformed HTTP requests. Is there any ...
12
votes
2answers
246 views

What is the best way to verify the SSL configuration of my web server?

How do I ensure I have my SSL configuration setup securely?
75
votes
14answers
14k views

Apache Server Hardening

What are some best practices, recommendations, required reading for securing an Apache Server?