httpd-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Dean Gaudet <dgau...@arctic.org>
Subject Re: mirrors and SSIs
Date Tue, 01 Jul 1997 22:41:29 GMT
Supposed to be :), but what's yer point?

Dean

On Tue, 1 Jul 1997, Ben Laurie wrote:

> Dean Gaudet wrote:
> > 
> > No this is the wrong answer.  I, for example, refuse to run CGIs or SSIs
> > that I download automatically from taz... and I trust Brian.  Requiring
> > mirrors to run SSI or CGI means that a compromise of taz can be a
> > compromise of every single mirror site.
> 
> Hang on - isn't SSI with no exec supposed to be safe?
> 
> Cheers,
> 
> Ben.
> 
> -- 
> Ben Laurie                Phone: +44 (181) 994 6435  Email: ben@algroup.co.uk
> Freelance Consultant and  Fax:   +44 (181) 994 6472
> Technical Director        URL: http://www.algroup.co.uk/Apache-SSL
> A.L. Digital Ltd,         Apache Group member (http://www.apache.org)
> London, England.          Apache-SSL author
> 


Mime
View raw message