Now that we have explored how HTTP and HTTPS work, we can look at how to set up a web server and associated services in a secure way. We will start by looking at service architecture design: how trust boundaries impact on protocol choices. Web frameworks make it easier to write safe code, and we will take a look at some common options.
We looked briefly at man-in-the-middle attacks in the last chapter. In this one, we will look at these attacks in more detail as well as how to defend against ...
