spirit posteets tagged http

How to combine HTTP and HTTPS blocks

6 years ago
1. server {
2. listen 80;
3. listen 443 default ssl;
5. # other directives
6. }
http https nginx server

Embed | Raw source | 0
Apache Tips: Disable the HTTP TRACE method

7 years ago

Most vulnerability scanners will complain about TRACE method being enabled on the web server tested. This tip disable it and return a 403 FORBIDDEN error to the client (apache versions newer than 1.3.34 for the legacy branch, and 2.0.55 for apache2).
```
This needs to be added in the main server config and the default is enabled (on):

TraceEnable Off
```
apache http securite security tips trace

Embed | Raw source | 0

“http” related tags

apache https nginx securite security server tips trace

spirit’s tags