New answers tagged

3

"More secure" is unconstructive Thinking something is "more secure" often leads to poor decision making. All sorts of things are more secure while being a bad idea. It's more useful to ask "Does this add meaningful security?" and "Is the security gained a reasonable tradeoff between cost and benefit?" Tiers don't add much security Most infosec books ...


3

You need an application layer as a filter because most* database systems do not allow permission handling which is fine-grained enough to handle multiple users. Usually* you can create users with different read- and write permissions, but usually* these are designed for up to a few dozen users and do not scale well for thousands or even millions of users. ...


4

If you distinguish between web server, application server and database then you actually mean front end, business logic and back end (storage). This is also called a multi-tier architecture with presentation tier, application tier and data tier. In this case the application server will not simply pass through any requests from the web server but only allow ...



Top 50 recent answers are included