On Wed, 6 Mar 2013 15:37:31 +0000 Brett Parker iDunno@sommitrealweird.co.uk allegedly wrote:
On 06 Mar 15:05, mick wrote:
Can you point to some examples? I may need to check my configurations.
Checkout security.debian.org and the CVEs ;)
The latest one for lighttpd, though, is just TLS/SSL problems, so fine as long as you're not using https :)
As I said, lighty seems no better or worse than any other internet server. A quick check over the last ten years shows that apart from 2008 (when lighty had four or five problems) it shows fewer reported issues than apache. Granted, however, that may be a reflection of the relative sizes of the userbase (and hence attention).
But mostly, I wouldn't run it on anything internet facing because it fell over when I was using it behind a proxy to run fastcgi scripts... if it can't deal with the simple things it tends to not go at the front.
Fair enough. Can't argue with that. Bad experience is bound to affect your choice.
Mick (vi)
---------------------------------------------------------------------
blog: baldric.net gpg fingerprint: FC23 3338 F664 5E66 876B 72C0 0A1F E60B 5BAD D312
---------------------------------------------------------------------