• subscribe
December 18, 2004 12:00 AM

Apache more secure?

Windows IT Pro
InstantDoc ID #44850

In response to the comment about apache on unix being "much more secure", I don't buy it. As far as I'm concerned, it's simply one of those persistant myths that IIS is any less secure than any other web server including Apache. An uniformed adminsitrator is just as likely to deploy an insecure apache server as they are an IIS server.

Oh, BTW, you might enjoy checking out the the 44 security flaws found by graduate students recently.
http://cr.yp.to/2004-494.html



ARTICLE TOOLS

Comments
  • Bubba
    7 years ago
    May 19, 2005

    Hey, did that same student get access to source code for windows products to see any security holes there?

  • Anonymous User
    7 years ago
    Jan 26, 2005

    I agree an uninformed admin is just as likely to deploy an insecure apache server.
    And I did indeed enjoy checking out the flaws the students found. After all, if you're not open to new info you won't learn anything.

    That said though, the link is not an ad for IIS on Windows either:
    First slide : "Research area: How can we build a secure UNIX system?
    (Vastly more difficult: How can we build a secure Windows system?
    Attackers have more ways to break into windows compters.)"

You must log on before posting a comment.

Are you a new visitor? Register Here