-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Leo,
On 11/8/13, 10:41 AM, Leo Donahue - OETX wrote: > Does anyone know if there is a newer benchmark? > > https://benchmarks.cisecurity.org/downloads/show-single/?file=tomcat.100 I > immediately thought "duh, OWASP probably has something newer than that." Sadly, they don't: https://www.owasp.org/index.php/Securing_tomcat It's also targeted at Tomcat 5.5 (and not even Tomcat 6). I think most of that stuff is still applicable. Also, there is information in "Tomcat: The Definitive Guide" but it only goes up to Tomcat 6 as well. Again, most of the tips are still applicable. - -chris -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.15 (Darwin) Comment: GPGTools - http://gpgtools.org Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/ iQIcBAEBCAAGBQJSfQcZAAoJEBzwKT+lPKRYJfcQAMZvipnY4f72CUPAmG+cihjz RxNRBDmLCd8WsaInS63H41Vs3Li1oxRPyQ0HVtMs2s63DeaGWSAmSjie7HE5A6ZA PCvzdERwyz9C15DACgS8sO+DJeM2m8xKy3qLf0ViHnjhw/cMhhux/DJx4ypKeF1/ 9L/kHLQO/hHESTPXxPRGZRHNIvjMqK7nnT4ftG4grmtyQykagRToeToc8rZtFsNE UuZrEhRYV68VKh2usES716T35wE7kXaHOcSFxi4IdYw82SjtIRA0NpzRSqGgkALd ++BiSIAZxDLVXhaAKGdZRiGTJZmV0Z0Nnmo4za/6XMT/WyB5i8K8aCGnAx7n6KZL Vb6dWtSyRperYbyOnKabd/RdukP6bqY32z1iqvi24NmCB1l1Zbq8i6pLH/V6j01K dJYkeHMkV1N3Bf7VBULDiev4w4PYt2q7r7iLzhiCzx+OOhT6rEZXQmkJ/ald1Clg hKefzDDHJTshfPCJIWgCUCjjh5jJSRVFdG5CZF1fL3a3Zcxa1zF16w+TaC+81AtH JMjWlhYzO/knafJOyQUkNLUmOLfkdzMmKJSn82hA9rxlty5Qvgyl77lJLEFgTon6 CMGDEQ8Uvmmo098g/c2JIWoq7wGsXOC+Zw0BHJsT48FbKUIAOewWhbMlQnOyEOTz GvvPmBlWkgeLazrKIIHK =QD74 -----END PGP SIGNATURE----- --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org