On 14/10/2010 17:19, Rob Gregory wrote:
> Hi All,
> 
> Quick question on what people's views are with regard to using Tomcat to
> host external/internet facing sites. A quick Google search recommends
> that these should be 'fronted' by Apache running reverse proxy. 

What reasons did they give?

> Is Tomcat classed as insecure 

Nope.

> and as such requires this proxy in front or is this due to the fact that
> Tomcat cannot reverse proxy on its own. 

Why does it need to?

(Arguably, putting HTTPD in front of Tomcat gives you a larger potential
for vulnerabilities, not less)


p

Attachment: 0x62590808.asc
Description: application/pgp-keys

Attachment: signature.asc
Description: OpenPGP digital signature

Reply via email to