Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for

Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for

Re: secure application using Tomcat

2005-10-14 Thread Mark
I would recommend placing Apache in front of Tomcat. You can also use mod_security on Apache to further lock down your application. I have found that if you want security, do not use Tomcat by itself. I never liked the idea of placing keystore passwords in XML files. At least Apache prompts you for