[5055] in WWW Security List Archive
Re: son of user cgi-advice SUMMARY
daemon@ATHENA.MIT.EDU (elroy)
Sun Apr 13 14:53:47 1997
Date: Sun, 13 Apr 1997 10:35:00 -0500 (CDT)
From: elroy <elroy@kcsun3.kcstar.com>
To: Yuan John Jiang <yjj@mci.net>
cc: www-security@ns2.rutgers.edu
In-Reply-To: <199704130202.WAA04443@cletus.>
Errors-To: owner-www-security@ns2.rutgers.edu
On Sat, 12 Apr 1997, Yuan John Jiang wrote:
[ ... ]
> I have extensive experience with both servers.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
Excellent.
> I'm attaching my
> web hosting FAQ below. Apparently you are not experienced with
> web hosting.
Interesting conclusion.
>Otherwise, you wouldn't think you need a $100,000
> box.
Did you deduce that I "need a $100,000 box" the same way you figured out
that I have no experience at web hosting?
You should re-read the letter you replied to, but read it CAREFULLY this
time. You also might pull some of the previous posts out of the archive
and read them to better understand the background of these messages.
> You wouldn't think the small speed difference between
> Apache and Netscape is that a big deal. My experience is that
> Apache is rock solid. Netscape is often problematic, probably
> due to the pressure to rush to market. In particular, the
> multi-thread problem Enterprise server has.
I would comment on this, but I haven't had problems with EITHER server
package, other than noticing that Apache is slower.
You're free to come to your own conclusions about when performance
is important and when it isn't. Like I've said, seven or eight times now,
use whatever is appropriate for your situation. Your decisions about
solutions that are appropriate for you are OK with me.
> When comes to support, I only hear curses about NS' support.
> I do not sing praises to Apache's support. Regular users may
> get answers from newsgroups quickly. But my questions usualy
> could only be answered by the developers. Then I find Apache
> and NS are in equal footing.
This sounds rather theoretical - I can't tell if you've actually used
support for either product, or if you MIGHT use it, and if you did your
questions MIGHT be answerable only by developers. It sounds like you've
used one product but not the other, and have experience with one support
group and but not the other. Nothing wrong with that, although it helps
to know what basis you have for your statements. It also helps me judge
the accuracy and completeness of your FAQ.
You're telling me you've heard these things somewhere? Are the
contents of your FAQ also things you've heard somewhere? Thanks for
sending it, by the way.
I've never needed support for the server software, neither for
compile-time nor for configuration - it's just not that hard.
However, your ( apparent ) need for support for web server software
doesn't make me think you're inexperienced in general at setting up
software packages on a server. Other people will come to their own conclusions.
----
Folks, I originally solicited advice from the members of this list,
and posted a summary of responses along with my solutions when it was
over. I thanked everyone who replied, and thanked the group in general. In
return I've recieved comments about my syntax and grammar, heard
disparaging remarks about my technical decisions and absurd allegations
about my qualifications in general. Have I angered the "experts" that
subscribe to this list by not using their advice? I don't recall
recieving ANY advice that was represented as "the ONLY solution" until I
started questioning some of the replies I've recieved lately.
I still maintain that there can be more than one correct solution to a problem,
and that you should use solutions that are appropriate for your setup.
Additionally I advise people that "forewarned is forearmed", both when
configuring web servers and when interpreting the recommendations of
other people. Read everything you can get your hands on, and actually TRY
THE STUFF OUT. And remember, the bottom-line is whether or not your
clients are happy and you can stay in business.
Thanks -
-elroy (elroy@kcstar.com)
