Tag Info

New answers tagged

1

There are different layers of secure transport to consider here: VPNs SSL VPN (including tunnels) IPSec VPN SSL/TLS for individual services IPSec vs SSL VPNs Both SSL and IPSec VPNs are good options, both with considerable security pedigree, although they may suit different applications. IPsec VPNs operate at layer 3 (network), and in a typical ...


0

There are reasons for using both protocols. When using an IPsec tunnel you would still want application level encryption. This is advantageous if there is a gap between the end of the tunnel and where your session ends. The following diagram describes why you may want application level encryption like HTTPS (SQL in my example) in addition to IPsec. User ...


0

It depends you may have corporate VPN Tunnel (that works on IPSEC) but a layer above the internal web server you are reaching over VPN in the corporate network might be HTTPS( which is via SSL) Long back i did a talk on this http://www.slideshare.net/sashankdvk/matrix-2768826


0

Here's a good article from cisco on IPSEC and SSL. It includes strengths and weaknesses as well as an overview of each, and also implementing both of them together.


1

/tmp will be one of the first folders an attacker will try to write files to after finding a security hole in your server configuration or (web) application. A good way to harden your server can be to offload /tmp to a dedicated partition and mount it as non-executeable. Though this only will work if you are not runnign any (bad) software that needs to ...


8

No, you can't. You can't ssh to folders, only to accounts. You might be able to mount the /tmp folder on another machine without a password if the server is running NFS or Samba and has fairly relaxed permissions.



Top 50 recent answers are included