Re: Does nginx use unique session identifiers

2019-07-11 Thread Francis Daly
On Tue, Jul 09, 2019 at 06:40:06PM +, Lemons, Terry wrote: Hi there, > One of the rules > (https://www.stigviewer.com/stig/web_server_security_requirements_guide/2014-11-17/finding/V-41807) > states, "The web server must generate unique session identifiers that cannot > be reliably

Re: Does nginx use unique session identifiers

2019-07-10 Thread Aleksandar Lazic
Hi. Am 09.07.2019 um 20:40 schrieb Lemons, Terry: > Hi > > Our product uses nginx to front-end inbound web access. To enhance our > product’s > security posture, we have been examining the rules in the DISA Web Server > Security Requirements Guide >

Does nginx use unique session identifiers

2019-07-09 Thread Lemons, Terry
Hi Our product uses nginx to front-end inbound web access. To enhance our product's security posture, we have been examining the rules in the DISA Web Server Security Requirements Guide. One of the rules