Squid Reverse Proxy security gotchas

Yesterday, there was a thread on hacker news highlighting that many sites around the world were making available potentially sensitive information about their site via Apache’s server-status link (provided by mod-status). The stated advice is to limit access to this and similar pages (such as the server info page provided by mod-info) by using Allow/Deny […]

Marcus Povey

Yesterday, there was a thread on hacker news highlighting that many sites around the world were making available potentially sensitive information about their site via Apache’s server-status link (provided by mod-status). The stated advice is to limit access to this and similar pages (such as the server info page provided by mod-info) by using Allow/Deny […]

Using WordPress with self signed SSL Certificates

WordPress, the popular blogging software written by Automattic, has a problem with SSL self signed certificates. Basically, they don’t work well in any of their newer software products or services. In order to post an update, I must first log into my blog. This requires me entering a username and password into a login box […]

Marcus Povey

WordPress, the popular blogging software written by Automattic, has a problem with SSL self signed certificates. Basically, they don’t work well in any of their newer software products or services. In order to post an update, I must first log into my blog. This requires me entering a username and password into a login box […]