what I learned today
Well today was quite fun...I learned:
- if you change aliases in postfix you need to run "newaliases" command...postfix restart ain't helping
- if you install sslh multiplexer change the config to "run=yes" and not "run=YES"
- your webserver needs to be configed that it only listens locally on 443 otherwise you get a port bind fuckup
- how to enforce ssl to prevent some nasty MITM (see sslstrip)
- enabling HTTP Strict Transport Security
- don't drink and config :D <-- I did not, but that's a general tip
No comments:
Post a Comment