Difference between revisions of "HTTP"
Jump to navigation
Jump to search
| Line 62: | Line 62: | ||
== Security == | == Security == | ||
| + | * https://en.wikipedia.org/wiki/HTTPS | ||
| + | |||
| + | * https://en.wikipedia.org/wiki/HTTP_Strict_Transport_Security | ||
| + | ** [http://www.imperialviolet.org/2012/07/19/hope9talk.html Living with HTTPS] (19 Jul 2012) | ||
| + | |||
* [http://www.troyhunt.com/2011/11/owasp-top-10-for-net-developers-part-9.html OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection] - Touching on HTTPS, SSL and TLS | * [http://www.troyhunt.com/2011/11/owasp-top-10-for-net-developers-part-9.html OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection] - Touching on HTTPS, SSL and TLS | ||
Revision as of 04:16, 20 July 2012
Basics
- HTTPie is a CLI, cURL-like tool for humans
- httpbin(1) - HTTP Request & Response Service
Servers
Nginx
- Configuration
- FullExample
- HttpRewriteModule - rewriting urls
- HttpAuthBasicModule - for directory passwords
- Pitfalls
Site folder location can vary.
/var/www debian /etc/nginx/html arch linux
Site setup
Create 'Server Block' (vhost) config file in
/etc/nginx/sites-available
and later ln -s them in
/etc/nginx/sites-enabled
- ServerBlockExample - Basic examples
- FcgiExample - FastCGI example. Keep seperate and include.
- http://wiki.nginx.org/Wordpress
- https://wiki.archlinux.org/index.php/PhpMyAdmin#NGINX_Configuration
Enable logging in vhost conf;
error_log /var/log/nginx-vhostnamehere.log error;
Tools
- https://github.com/perusio/nginx_ensite - nginx_ensite and nginx_dissite for quick virtual host enabling and disabling
Apache
Other
Security
- WP: HTTP_Strict_Transport_Security
- Living with HTTPS (19 Jul 2012)
- OWASP Top 10 for .NET developers part 9: Insufficient Transport Layer Protection - Touching on HTTPS, SSL and TLS