Return-Path: Delivered-To: apmail-jakarta-tomcat-user-archive@apache.org Received: (qmail 38682 invoked from network); 27 Feb 2003 17:44:15 -0000 Received: from exchange.sun.com (192.18.33.10) by daedalus.apache.org with SMTP; 27 Feb 2003 17:44:15 -0000 Received: (qmail 12238 invoked by uid 97); 27 Feb 2003 17:45:53 -0000 Delivered-To: qmlist-jakarta-archive-tomcat-user@nagoya.betaversion.org Received: (qmail 12231 invoked from network); 27 Feb 2003 17:45:53 -0000 Received: from daedalus.apache.org (HELO apache.org) (208.185.179.12) by nagoya.betaversion.org with SMTP; 27 Feb 2003 17:45:53 -0000 Received: (qmail 37173 invoked by uid 500); 27 Feb 2003 17:43:56 -0000 Mailing-List: contact tomcat-user-help@jakarta.apache.org; run by ezmlm Precedence: bulk List-Unsubscribe: List-Subscribe: List-Help: List-Post: List-Id: "Tomcat Users List" Reply-To: "Tomcat Users List" Delivered-To: mailing list tomcat-user@jakarta.apache.org Received: (qmail 37159 invoked from network); 27 Feb 2003 17:43:56 -0000 Received: from hawk.mail.pas.earthlink.net (207.217.120.22) by daedalus.apache.org with SMTP; 27 Feb 2003 17:43:56 -0000 Received: from user-vcaurd7.dsl.mindspring.com ([216.175.109.167] helo=veginfo.com) by hawk.mail.pas.earthlink.net with esmtp (Exim 3.33 #1) id 18oS4d-0000jq-00 for tomcat-user@jakarta.apache.org; Thu, 27 Feb 2003 09:43:59 -0800 Message-ID: <3E5E4E4C.2070506@veginfo.com> Date: Thu, 27 Feb 2003 09:43:40 -0800 From: mls@veginfo.com User-Agent: Mozilla/5.0 (Windows; U; Win 9x 4.90; en-US; rv:1.0.2) Gecko/20021120 Netscape/7.01 X-Accept-Language: en-us, en MIME-Version: 1.0 To: tomcat-user@jakarta.apache.org Subject: JSP or Servlet wrt security Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N X-Spam-Rating: daedalus.apache.org 1.6.2 0/1000/N For creating a totally new web site, is there any difference from security point of view of using only servlets or using only JSPs? Environment (if it matters) non-root Tomcat 4.1.18 (serving both static and dynamic pages - no web server ahead of it), Linux (RH 7.3), DMZ (packet filter), JNDI and some sort of SQL db (running on same server as Tomcat). das --------------------------------------------------------------------- To unsubscribe, e-mail: tomcat-user-unsubscribe@jakarta.apache.org For additional commands, e-mail: tomcat-user-help@jakarta.apache.org