Two months ago Rich asked me to help with the Security Tips page and I
agreed. I subscribed to this list straight away but it was only a few
days ago that I started thinking about what needs to be done. (I fear
the delay may be indicative when it comes to my future performance,
but I will try to do better.) To help me understand the scope of the
problem of securing Apache, I created the Apache Security Model, which
I've just published:
http://www.apachesecurity.net/blog/Apache-Security-Model.png
Wow. That's comprehensive, and will be a HUGE leap up from the
"security" documentation we have now. Thanks so much for putting your
time into this worthy venture.
--Rich
--
Oh! I have slipped the surly bonds of earth
And danced the skies on laughter-silvered wings