A server is a machine running a software daemon that is generally accessed over a network by other machines.

learn more… | top users | synonyms

3
votes
1answer
113 views

Securing server to server http communication

We are trying to come up with a scheme to secure http communication between our internal servers. Are there any good established schemes out there? The requirements we have are: The clients and ...
1
vote
1answer
27 views

Securing a VPS network with a VPN and a DMZ

I've got several VPS boxes (Digital Ocean boxes w/Ubuntu) that I would like to lock down from the outside world. I want to have several private boxes (web servers, db servers, puppet/master boxes ...
0
votes
1answer
48 views

possible implications of disabling Windows Server “administrator” account?

Let's say that you have been running a domain for a few years. Today you decide that for security reasons you would like to disable the built-in "administrator" account (so they stop trying to guess ...
-1
votes
1answer
41 views

Exchange of encrypted files through a server

I have a thing to do, that basically bases on a server that is honest but curious. Therefore I want the server to have the public key for encryption and it will encrypt files during the process of ...
2
votes
0answers
82 views

Distinct databases with the same Kerberos Authentication server

Should two deployed applications within a private network requiring distinct databases (for storing their own users credentials) require distinct Authentication servers (implementing Kerberos)? Or is ...
1
vote
0answers
129 views

Does using NAT-T for L2TP / IPsec VPN pose a realistic security risk?

I'm working on upgrading an old Windows RAS server that hosts PPTP VPN. I want to move to a L2TP/IPsec VPN. Due to the firewall appliance we use, the VPN server has to be behind a NAT. This means ...
0
votes
0answers
65 views

What is attacker trying to do with my server?

Some is trying to access this link (and similar ones) frequently in my site: http://mysite.com/upload/RS=%5EADAJVxZ5NB.GMTgFV3EMEJX3sN22Jw- Note that my server doesn't have an upload folder inside ...
0
votes
0answers
121 views

Mobile Backend Server: How to validate authenticated client is valid?

Consider this scenario Step 1: App asks user to "Sign In" using Google or Facebook Step 2: Once authenticated, app sends user's Id (from Google/Facebook) to My App Server requested to app ...
0
votes
0answers
77 views

OWASP ZAP with self-signed server cer

I have my browser connect to ZAP via proxy with ZAP cer imported into firefox. I am getting " "connection timeout" when trying to access self-signed server but i am able to see traffic from ...