{"id":5493,"date":"2019-09-26T13:49:19","date_gmt":"2019-09-26T13:49:19","guid":{"rendered":"https:\/\/merikebi.warrenmyers.com\/?p=5493"},"modified":"2019-09-26T13:49:19","modified_gmt":"2019-09-26T13:49:19","slug":"new-comment-on-reddit-98","status":"publish","type":"post","link":"https:\/\/merikebi.warrenmyers.com\/?p=5493","title":{"rendered":"New comment on reddit"},"content":{"rendered":"<div class=\"md\">\n<h3>Here&#39;s the baseline SSL conf I use with Apache:<\/h3>\n<ul>\n<li><a href=\"https:\/\/antipaucity.com\/2017\/07\/07\/ssl-configuration-for-apache-2-4-on-centos-7-with-lets-encrypt\/#.XYy9zyUpChY\">https:\/\/antipaucity.com\/2017\/07\/07\/ssl-configuration-for-apache-2-4-on-centos-7-with-lets-encrypt\/#.XYy9zyUpChY<\/a><\/li>\n<\/ul>\n<h3>Here&#39;re a bunch of security tips for Apache:<\/h3>\n<ul>\n<li><a href=\"https:\/\/geekflare.com\/10-best-practices-to-secure-and-harden-your-apache-web-server\">https:\/\/geekflare.com\/10-best-practices-to-secure-and-harden-your-apache-web-server<\/a><\/li>\n<li><a href=\"https:\/\/www.petefreitag.com\/item\/505.cfm\">https:\/\/www.petefreitag.com\/item\/505.cfm<\/a><\/li>\n<li><a href=\"https:\/\/www.techrepublic.com\/article\/how-to-secure-your-apache-2-server-in-four-steps\">https:\/\/www.techrepublic.com\/article\/how-to-secure-your-apache-2-server-in-four-steps<\/a><\/li>\n<li><a href=\"https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/226327268-The-most-important-steps-to-take-to-make-an-Apache-server-more-secure\">https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/226327268-The-most-important-steps-to-take-to-make-an-Apache-server-more-secure<\/a><\/li>\n<li><a href=\"https:\/\/www.cisecurity.org\/benchmark\/apache_http_server\">https:\/\/www.cisecurity.org\/benchmark\/apache_http_server<\/a><\/li>\n<li><a href=\"https:\/\/www.tecmint.com\/apache-security-tips\">https:\/\/www.tecmint.com\/apache-security-tips<\/a><\/li>\n<\/ul>\n<h3>And for IIS:<\/h3>\n<ul>\n<li><a href=\"https:\/\/calcomsoftware.com\/hardening-iis-server-guide\">https:\/\/calcomsoftware.com\/hardening-iis-server-guide<\/a><\/li>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/dd450371(v=ws.10)?redirectedfrom=MSDN\">https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/dd450371(v=ws.10)?redirectedfrom=MSDN<\/a><\/li>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/previous-versions\/tn-archive\/dd163531(v=technet.10)?redirectedfrom=MSDN\">https:\/\/docs.microsoft.com\/en-us\/previous-versions\/tn-archive\/dd163531(v=technet.10)?redirectedfrom=MSDN<\/a><\/li>\n<li><a href=\"https:\/\/techcommunity.microsoft.com\/t5\/Exchange-Team-Blog\/Exchange-TLS-038-SSL-Best-Practices\/ba-p\/603798\">https:\/\/techcommunity.microsoft.com\/t5\/Exchange-Team-Blog\/Exchange-TLS-038-SSL-Best-Practices\/ba-p\/603798<\/a><\/li>\n<li><a href=\"https:\/\/www.cisecurity.org\/benchmark\/microsoft_iis\">https:\/\/www.cisecurity.org\/benchmark\/microsoft_iis<\/a><\/li>\n<li><a href=\"https:\/\/www.upguard.com\/articles\/10-steps-for-improving-iis-security\">https:\/\/www.upguard.com\/articles\/10-steps-for-improving-iis-security<\/a><\/li>\n<li><a href=\"https:\/\/www.davidfroud.com\/pci-going-beyond-the-standard-part-8-configuration-standards\">https:\/\/www.davidfroud.com\/pci-going-beyond-the-standard-part-8-configuration-standards<\/a><\/li>\n<li><a href=\"https:\/\/support.microsoft.com\/en-us\/help\/324069\/how-to-set-up-an-https-service-in-iis\">https:\/\/support.microsoft.com\/en-us\/help\/324069\/how-to-set-up-an-https-service-in-iis<\/a><\/li>\n<\/ul>\n<h3>And, of course, there are guides from places like <a href=\"https:\/\/public.cyber.mil\/stigs\/downloads\">DISA<\/a>:<\/h3>\n<ul>\n<li>Apache 2.4: <a href=\"https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_Apache_Server_2-4_UNIX_STIG.zip\">https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_Apache_Server_2-4_UNIX_STIG.zip<\/a><\/li>\n<li>IIS 8.5: <a href=\"https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_MS_IIS_8-5_Server_V1R8_STIG.zip\">https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_MS_IIS_8-5_Server_V1R8_STIG.zip<\/a><\/li>\n<\/ul><\/div>\n<p>September 26, 2019 at 09:44AM<br \/>\nvia reddit https:\/\/www.reddit.com\/r\/security\/comments\/d94b4y\/webserver_baselines\/f1i3pog?utm_source=ifttt<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Here&#39;s the baseline SSL conf I use with Apache: https:\/\/antipaucity.com\/2017\/07\/07\/ssl-configuration-for-apache-2-4-on-centos-7-with-lets-encrypt\/#.XYy9zyUpChY Here&#39;re a bunch of security tips for Apache: https:\/\/geekflare.com\/10-best-practices-to-secure-and-harden-your-apache-web-server https:\/\/www.petefreitag.com\/item\/505.cfm https:\/\/www.techrepublic.com\/article\/how-to-secure-your-apache-2-server-in-four-steps https:\/\/help.dreamhost.com\/hc\/en-us\/articles\/226327268-The-most-important-steps-to-take-to-make-an-Apache-server-more-secure https:\/\/www.cisecurity.org\/benchmark\/apache_http_server https:\/\/www.tecmint.com\/apache-security-tips And for IIS: https:\/\/calcomsoftware.com\/hardening-iis-server-guide https:\/\/docs.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2008-R2-and-2008\/dd450371(v=ws.10)?redirectedfrom=MSDN https:\/\/docs.microsoft.com\/en-us\/previous-versions\/tn-archive\/dd163531(v=technet.10)?redirectedfrom=MSDN https:\/\/techcommunity.microsoft.com\/t5\/Exchange-Team-Blog\/Exchange-TLS-038-SSL-Best-Practices\/ba-p\/603798 https:\/\/www.cisecurity.org\/benchmark\/microsoft_iis https:\/\/www.upguard.com\/articles\/10-steps-for-improving-iis-security https:\/\/www.davidfroud.com\/pci-going-beyond-the-standard-part-8-configuration-standards https:\/\/support.microsoft.com\/en-us\/help\/324069\/how-to-set-up-an-https-service-in-iis And, of course, there are guides from places like DISA: Apache 2.4: https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_Apache_Server_2-4_UNIX_STIG.zip IIS 8.5: https:\/\/dl.dod.cyber.mil\/wp-content\/uploads\/stigs\/zip\/U_MS_IIS_8-5_Server_V1R8_STIG.zip September 26, 2019 at &hellip;<br \/><a href=\"https:\/\/merikebi.warrenmyers.com\/?p=5493\" class=\"more-link pen_button pen_element_default pen_icon_arrow_double\">Continue reading <span class=\"screen-reader-text\">New comment on reddit<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_hide_featured_image":false,"_jetpack_featured_image_duplicate_dismissed":0,"_jetpack_feature_clip_id":0,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_post_was_ever_published":false},"categories":[4],"tags":[972],"keyring_services":[],"class_list":["post-5493","post","type-post","status-publish","format-standard","hentry","category-blih","tag-reddit"],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/5493","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=5493"}],"version-history":[{"count":1,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/5493\/revisions"}],"predecessor-version":[{"id":5494,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=\/wp\/v2\/posts\/5493\/revisions\/5494"}],"wp:attachment":[{"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=5493"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=5493"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=5493"},{"taxonomy":"keyring_services","embeddable":true,"href":"https:\/\/merikebi.warrenmyers.com\/index.php?rest_route=%2Fwp%2Fv2%2Fkeyring_services&post=5493"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}