[WEB4LIB] RE: apache v. netscape enterprise security

[leblanc at almark.lamar.edu]

> Can anyone tell me how Apache and Enterprise compare as far as security
> goes? Our local systems folks are anti-Apache on security grounds; since
> everyone else in the world seems to be pro-Apache, I figure good security
> must be possible -- please tell me I'm right?
> 
> I've not actually heard much from them yet about the specifics of their
> concerns -- when I meet with them next week I'd like to have some clue
> about *other* people's perceptions of the relative security merits. I know
> our folks haven't used Apache much, so I have a feeling that "the security
> is insufficient" may really be "we aren't sure how to make it secure".
> 
> Any ideas on the general comparison or on where to get good information on
> making Apache secure would be appreciated.

Mr Irwin,

The best guide to Apache security would have to be "Apache: The
Definitive Guide, 2nd Edition" from O'Reilly Publishing, ISBN
1-56592-528-9.

This guide can be used straight through as an introduction to, and setup
of, Apache.  It can also be used as a reference text, going to the areas
that pertain to what is being done.

As for your local systems folks, I would have to lean toward the idea
that that are not familiar with Apache, and therefore are using this
'security' arguement as a way to get around learning it.  Also, a big
question is what OS are you planning to run this on?  I know that
Netscape Enterprise, now I-Planet, runs on Solaris and NT, along with a
few other flavors of UNIX (or UNIX-like).

If you need a straight comparison, then I need to know what version of
Enterprise they are using.

Thanks,

Chris LeBlanc
Lamar University Library
409-880-1870
leblanc at library.lamar.edu