tomcat-users mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Christopher Schultz <ch...@christopherschultz.net>
Subject Re: security benchmarks
Date Fri, 08 Nov 2013 15:45:31 GMT
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Leo,

On 11/8/13, 10:41 AM, Leo Donahue - OETX wrote:
> Does anyone know if there is a newer benchmark?
> 
> https://benchmarks.cisecurity.org/downloads/show-single/?file=tomcat.100

I
> 
immediately thought "duh, OWASP probably has something newer than
that." Sadly, they don't:

https://www.owasp.org/index.php/Securing_tomcat

It's also targeted at Tomcat 5.5 (and not even Tomcat 6).

I think most of that stuff is still applicable.

Also, there is information in "Tomcat: The Definitive Guide" but it
only goes up to Tomcat 6 as well. Again, most of the tips are still
applicable.

- -chris
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.15 (Darwin)
Comment: GPGTools - http://gpgtools.org
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=QD74
-----END PGP SIGNATURE-----

---------------------------------------------------------------------
To unsubscribe, e-mail: users-unsubscribe@tomcat.apache.org
For additional commands, e-mail: users-help@tomcat.apache.org


Mime
View raw message