fullstackpython.github.com/website-security.html at gh-pages · Altons/fullstackpython.github.com · GitHub

History

132 lines (125 loc) · 7.03 KB

Raw

100

101

102

103

104

105

106

107

108

109

110

111

112

113

114

115

116

117

118

119

120

121

122

123

124

125

126

127

128

129

130

131

132

<!DOCTYPE html>

<title>Full Stack Python</title>

<!--[if lt IE 9]>

<![endif]-->

<style>

html,

body {

font-size: 18px;

color: #222;

background: #fefefe;

}

body {

padding-top: 30px;

}

.footer {

padding: 20px 0 30px 0;

}

a, a:hover {border-bottom: 1px dotted; color: #444;}

a:hover {text-decoration: none; color: #000;}

.logo-title {font-size: 56px; color: #403072; padding-top: 80px;

font-family: "News Cycle", "Arial Narrow Bold", sans-serif;

font-weight: bold; line-height: 30px; margin-left: 5px;}

.logo-title a, .logo-title a:hover {color: #000; text-decoration: none;

border-bottom: none;}

.logo-title a:hover {color: gray;}

.logo-image {vertical-align: top; border: none;}

a.list-group-item.active {background: #444; border: 1px solid #222;}

a.list-group-item.active:hover {background: #444; border: 1px solid #222;}

#sidebar {margin-top: 30px;}

@media (max-width: 600px) {

.logo-header-section {

margin: 20px 32px 0 0;

}

</style>

var _gaq = _gaq || [];

_gaq.push(['_setAccount', 'UA-19910497-7']);

_gaq.push(['_trackPageview']);

(function() {

var ga = document.createElement('script'); ga.type = 'text/javascript'; ga.async = true;

ga.src = ('https:' == document.location.protocol ? 'https://ssl' : 'http://www') + '.google-analytics.com/ga.js';

var s = document.getElementsByTagName('script')[0]; s.parentNode.insertBefore(ga, s);

})();

</script>

</head>

<body>

</a>

<span class="logo-title"><a href="/">Full Stack Python</a></span>

</div>

</div> <div class="row">

<h1>Website Security</h1>

<p>Website security must be incorporated into building every level of the web

stack. However, I include a separate section here for topics that deserve

a comprehensive review such as firewalls, SSL certificates, and public key

authorization.</p>

<h2>Key Terms</h2>

<p><em>Authorization</em> - specifying access rights and permissions to server and

application resources. For example, a non-logged in user can view a landing

page but only a logged in user can access an application's "account" screen.</p>

</div>

<h2>Website Security Resources</h2>

<p><a class="reference external" href="http://erik.io/blog/2013/06/08/a-basic-guide-to-when-and-how-to-deploy-https/">When and How to Deploy HTTPS</a></p>

<p><a class="reference external" href="http://spenserj.com/blog/2013/07/15/securing-a-linux-server/">Securing a Linux Server</a></p>

<p><a class="reference external" href="http://arstechnica.com/security/2013/02/securing-your-website-a-tough-job-but-someones-got-to-do-it/">Securing Your Website</a></p>

<p><a class="reference external" href="http://blog.hartleybrody.com/https-certificates/">How HTTPS Secures Connections: What Every Web Dev Should Know</a></p>

</div>

<br/>

Next read the

<a href="/caching.html">caching</a> section.

</div>

<a href="/introduction.html" class="list-group-item ">Introduction</a>

<a href="/servers.html" class="list-group-item ">Servers</a>

<a href="/operating-systems.html" class="list-group-item ">Operating Systems</a>

<a href="/web-servers.html" class="list-group-item ">Web Servers</a>

<a href="/databases.html" class="list-group-item ">Databases</a>

<a href="/wsgi-servers.html" class="list-group-item ">WSGI Servers</a>

<a href="/web-frameworks.html" class="list-group-item ">Web Frameworks</a>

<a href="/static-content.html" class="list-group-item ">Static Content</a>

<a href="/website-security.html" class="list-group-item active">Website Security</a>

<a href="/caching.html" class="list-group-item ">Caching</a>

<a href="/web-analytics.html" class="list-group-item ">Web Analytics</a>

<a href="/monitoring.html" class="list-group-item ">Monitoring</a>

<a href="/source-control.html" class="list-group-item ">Source Control</a>

<a href="/configuration-management.html" class="list-group-item ">Configuration Management</a>

<a href="/dependency-management.html" class="list-group-item ">Application Dependencies</a>

<a href="/task-queues.html" class="list-group-item ">Task Queues</a>

<a href="/no-sql-datastore.html" class="list-group-item ">NoSQL Data Stores</a>

<a href="/about-author.html" class="list-group-item ">About</a>

<a href="/change-log.html" class="list-group-item ">Change Log</a>

</div>

</div></div>

<hr/>

<a href="http://www.mattmakai.com/" class="underline">Matt Makai</a> 2014

</div>

</body>

</html>

fullstackpython.github.com/website-security.html at gh-pages · Altons/fullstackpython.github.com · GitHub

Expand file tree

Breadcrumbs

website-security.html

Latest commit

History

Breadcrumbs

website-security.html

File metadata and controls