News for hackers. Stuff that matters.

A comment on Developers fix multitude of vulnerabilities in Apache HTTP Server. Parent comment

Re:Developers fix multitude of vulnerabilities in Apache HTT... by beamatronic on Friday September 24, 2021 @03:19PM (#28646689)
I was looking for a pre-hardened httpd just for serving static html files, is there one?
[ Parent | on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT... by ldoughty on Friday September 24, 2021 @03:32PM (#28646821)
Probably not the answer you want to hear... But I push that stuff to AWS S3 website and put a CDN in front for SSL... that's my solution for "easy secure static site" when I don't want to invest more than an hour or so a year on the infrastructure... But obviously that's not for everyone.

Edit: specific to your request, I would probably set up a container pointing to the latest apache build, and write a script to pull the latest image then roll over the container... Don't need to wait for your OS of choice to have the fixed versions... Your never more than a day behind

[ Parent | on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT... by notRobot on Friday September 24, 2021 @03:39PM (#28646889)
https://github.com/emikulic/darkhttpd

darkhttpd is an option

[ Parent | on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT... by chriswarbo on Friday September 24, 2021 @07:22PM (#28648902)
I've been running darkhttpd for years. I was recently complemented on how fast my site loads; although part of that is probably the lack of JS tracking bloat.
[ Parent | on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT... by juangacovas on Friday September 24, 2021 @06:13PM (#28648391)
lighttpd is still a thing (I use it for very critical stuff)
[ Parent | on HN ]
Re:Developers fix multitude of vulnerabilities in Apache HTT... by lhoff on Friday September 24, 2021 @03:59PM (#28647118)
Maybe Gatling fits your needs

https://www.fefe.de/gatling/

[ Parent | on HN ]