ColdFusion shipped with Website Pro 1.0 on floppies. Website later
shipped with iHTML.

-----Original Message-----
From: Haggerty, Michael A. [mailto:[EMAIL PROTECTED]] 
Sent: Monday, March 11, 2002 8:00 AM
To: CF-Talk
Subject: RE: OT: my own box


I used Website Pro version 1.0 in college, and I remember getting some
free server software for building dynamic Web pages along with it. The
name sounded like something from a physics class, and the name of the
company started with an 'A'...

Anyone remember?

-----Original Message-----
From: Dylan Bromby [mailto:[EMAIL PROTECTED]]
Sent: Monday, March 11, 2002 10:30 AM
To: CF-Talk
Subject: RE: OT: my own box


We ran Website Pro from January '96 (version 1.0) until just over a year
ago then migrated to IIS on WIN2K.

Our main contention was, under heavy load, Website just crapped out
whereas IIS did a much better job it seemed of pooling/managing threads.
Additionally, our CF-based B2B channel applications were being hindered
because Website didn't implement HTTP 1.1 until LONG after IIS did.
Believe me, we -were- Website fans.

We don't spend any more time administering IIS than we did Website, and
the performance gain is noticable (but I won't spawn a debate of the
differences). If you subscribe to a service such as NTBUGTRAQ, you'll be
notified of IIS issues before the media in most cases. And it only takes
a few minutes to check for security updates on a weekly basis. IIS is by
far not the only subject of security issues. Apache, the most prevalent
web server on the net, has its share as well. If you think choosing a
certain HTTP server (or SMTP, FTP, DNS, or any other server with a
public interface to the web) over another will grant you more security
in and of itself, you may find yourself unpleasantly surprised one day.


-----Original Message-----
From: Dave Watts [mailto:[EMAIL PROTECTED]] 
Sent: Monday, March 11, 2002 7:12 AM
To: CF-Talk
Subject: RE: OT: my own box


> > I'm wondering if anyone can share thoughts on installing IIS
> 
> My best advice is DON'T, if you can possibly help it. I personally 
> disable IIS before my machines ever get connected to the Internet.
> 
> Website Pro is the way to go. The time you'll save not having to spend

> checking for and installing security updates will pay for it in no 
> time. Plus it let's me sleep at night.
> 
> http://www.deerfield.com/products/website/

Don't sleep too soundly. If you install all of the stuff that Website
Pro comes with, you might have quite a few vulnerabilities of your own.
A cursory search for "Website Pro" on securityfocus.com returned four
pages of known vulnerabilities. In addition, because of the lesser
scrutiny that Website Pro suffers, compared to IIS, I wouldn't be
surprised if there are more "secret" vulnerabilities, which have been
discovered but haven't been widely publicized.

The key with any server installation is to install only the components
you need, to disable or remove any that you don't, and  to know the
difference between the two.

Dave Watts, CTO, Fig Leaf Software
http://www.figleaf.com/
voice: (202) 797-5496
fax: (202) 797-5444




______________________________________________________________________
Dedicated Windows 2000 Server
  PIII 800 / 256 MB RAM / 40 GB HD / 20 GB MO/XFER
  Instant Activation · $99/Month · Free Setup
  http://www.pennyhost.com/redirect.cfm?adcode=coldfusiona
FAQ: http://www.thenetprofits.co.uk/coldfusion/faq
Archives: http://www.mail-archive.com/cf-talk@houseoffusion.com/
Unsubscribe: http://www.houseoffusion.com/index.cfm?sidebar=lists

Reply via email to