You don't say if this is to be run on a dedicated ("managed"?) server or
on a shared host? If the the hosting provider has such extreme
reservations about hosting and supporting CF applications, then someone
definitely picked the wrong host and you may be in for quite a nightmare
if you run into problems down the road.
Jim
-----Original Message-----
From: Garry Viner <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED] <[EMAIL PROTECTED]>
Date: Thursday, September 07, 2000 2:41 AM
Subject: Is CF a "high risk application"?
>This is a multi-part message in MIME format.
>
>------=_NextPart_000_000E_01C01903.4B82E640
>Content-Type: text/plain;
> charset="iso-8859-1"
>Content-Transfer-Encoding: 7bit
>
>Hi all
>
>We have built a CF global bank trading platform, and currently the site
is
>doing nicely. However the powers that be are moving the hosting of the
site
>to a new company, who have made the following comments regarding Cold
>Fusion. Anybody know if this is true, and what's a good line of
argument for
>convincing them that CF is the way to proceed into the future? Here is
their
>statement:
>
>ColdFusion is considered a "high risk application", which means that it
can
>be installed but the server SLA no longer applies for that server(s).
>ColdFusion is a security risk because Allaire has not published the
actual
>rights required for ColdFusion to run under NT. For this reason, the
only
>choice when running ColdFusion is to allow the ColdFusion application
full
>administrative rights. This is a security risk both because any
security
>flaw in ColdFusion allows the attacker full administrative privileges,
and
>because #Host# must give administrative control to the customer.
>
>Any feedback would be greatly appreciated
>
>Thanks a lot
>
>Garry Viner
>-----------------------------------------------------------------------
-----
>--------
>Red 5 Interactive Media Pty Ltd
>Level 4, 9-13 Bronte Rd
>Bondi Junction NSW 2022
>Ph 61 2 9387 6493 Fax 61 2 9387 8355
------------------------------------------------------------------------------
Archives: http://www.mail-archive.com/[email protected]/
To Unsubscribe visit
http://www.houseoffusion.com/index.cfm?sidebar=lists&body=lists/cf_talk or send a
message to [EMAIL PROTECTED] with 'unsubscribe' in the body.
