>> Rob Mayoff wrote: >Personally, I'd not be inclined to use a single server for both DAV and >normal web serving. By separating the services into different processes, >you can run the normal web server as a uid that only has read access to >the files, and the DAV server as a uid that has write access. Then you >can restrict the DAV server to only allow SSL connections (and not even >load nssock), and use different firewall rules for the two servers.
You could use a single server but only allow DAV access on a separate nsopenssl port. Could even use client PKI certs on that port to make the authentication more secure. Then deny any kind of DAV access on any other nssock or nsopenssl port. ./s
