The only truly secure system is one that is powered off, cast in a block of concrete and sealed in a lead-lined room with armed guards.
—Gene Spafford
If your public website is completely static, your exposure is less. But the moment you step in the world of dynamic web applications, complexities arise. How would you authenticate your clients? How would you authorize them? How will your customers know that the website they are viewing is actually coming off your web servers and there is nobody between you and your client playing the spoilsport? How will you ensure that nobody sees the password while the ...
