hello ...

nothing mean was meant here. I never do any finger pointing. Thus, I don't think 
anyone is too lazy and you have to
admire all those who work in the Apache Project, like any open-source project (like 
mod_ssl).

The people work very hard for the concept of open-source, for people like me, who 
can't write anything more in C
than hello world. 

If Apache does release something new, it always has my 100 percent trust. I trust the 
very kind people from Apache
that they have done their very best to ensure that the product has gone through all 
the controls if needs to. And
that is why Apache is the most popular webserver by far. 

Thus, maybe that's the reason that they don't have the time to update Apache on their 
own server. And yes, I don't
doubt for a second that they are using FreeBSD elf now. 

tim

On Mon, Mar 13, 2000 at 08:44:56PM -0000, Boyce, Nick wrote:
> "Tim" <[EMAIL PROTECTED]> wrote :
> 
> > what a shame that the apache sysadmin is too lazy to update
> 
> I think that's kind of uncalled-for. 
> 
> Points :
> 1) I expect Brian Behlendorf (sp?) is at the ApacheCon conference, has been
> preparing for it, and/or is on his way back.
>     Either way, he'll have been a mite busy just lately.
> 2) As Lewis Bergman explained just now :
>     "Do you run scripts which are subject to the cross site scripting
> addressed in
>      one of the latest CERT's. 1.3.12 addresses this problem."
>    The main point of 1.3.12 is to address those security problems; if a
> website doesn't have any dynamic content, and hasn't hit any of the other
> (mostly minor ?) bugs fixed in 1.3.12, then there's no *need* to upgrade.
> 
> What's your purpose ?
> 
> Nick
> Systems Team, EDS Healthcare, Bristol, UK
> ______________________________________________________________________
> Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
> User Support Mailing List                      [EMAIL PROTECTED]
> Automated List Manager                            [EMAIL PROTECTED]
______________________________________________________________________
Apache Interface to OpenSSL (mod_ssl)                   www.modssl.org
User Support Mailing List                      [EMAIL PROTECTED]
Automated List Manager                            [EMAIL PROTECTED]

Reply via email to