Guidelines on Securing Public Web Servers

List of Figures 

Figure 6.1: Relative Risk of Common Client Side Active Content.......................43 

Figure 7.1: SSL/TLS Location within the Internet Protocol Stack........................54 

Figure 7.2: Sample CSR........................................................................................59 

Figure 7.3: Sample Encoded SSL/TLS Certificate................................................60 

Figure 8.1: Basic DMZ .........................................................................................65 

Figure 8.2: Two Firewall DMZ.............................................................................66 

Figure 8.3: Three Interface Firewall DMZ............................................................66 

Figure 8.4: Outsourced Web Server Hosting ........................................................68 

viii