-
SSLv3 and securing against Poodle
If you are using SSL in your web server, you probably want to read this. Google recently published details about an attack that targets SSLv3. The exploit first allows attackers to initiate a “downgrade dance” that tells the client that the server doesn’t support the more secure TLS (Transport Layer Security) protocol and forces it…
-
PCI compliance – a basic HOWTO
A lot of people are wanting to be PCI compliant these days, and this is generally a good thing. PCI compliance is not just a server spec, but a list of procedures, policies, controls over access to data. Therefore the server side is only one part of the process. It can be expensive and time…
-
Setup mail hosting on Debian Squeeze and other distros using postfixadmin
Postfix is our favorite mail server. We find it’s easy to configure and performs really well. When asked at a recent conference talk, Eric Allman the creator of Sendmail, said he would use Postfix if starting today. Many people ask us if there is an easier way to setup and manage email address and aliases,…