On 14/10/2010 17:19, Rob Gregory wrote: > Hi All, > > Quick question on what people's views are with regard to using Tomcat to > host external/internet facing sites. A quick Google search recommends > that these should be 'fronted' by Apache running reverse proxy.
What reasons did they give? > Is Tomcat classed as insecure Nope. > and as such requires this proxy in front or is this due to the fact that > Tomcat cannot reverse proxy on its own. Why does it need to? (Arguably, putting HTTPD in front of Tomcat gives you a larger potential for vulnerabilities, not less) p
0x62590808.asc
Description: application/pgp-keys
signature.asc
Description: OpenPGP digital signature