Open Source Summit + ELC Europe 2019

In this BoF session it's all about common conflicts between developers and sysadmins regarding security requirements in small to mid-size webserver environments.

Every website or code has its own special requirements in how it should be executed and therefore it can become very tricky in regard of how to make your webserver compatible to the code a developer is using and make it secure at the same time. You could turn off most of the security features to get the application working. Sure that's the easy way but as a sysadmin, you are also responsible to prevent script-kiddies, bots and other bad guys from injecting malicious code into your environment. So I would like to point out some topics about webserver security from an admin point of view and I'd like to learn about your experience with web security.