From: Darren Garvey (lists.drrngrvy_at_[hidden])
Date: 2007-08-19 16:34:21
On 19/08/07, Martin Wille <mw8329_at_[hidden]> wrote:
> Darren Garvey wrote:
> > Docs are located at: http://cgi.sf.net
> I had a quick glance at the docs. On the "supported protocols" page you
> list when which of the supported protocols could be used. An important
> reason - maybe the most important one - to use FCGI or SCGI is missing:
> privilege separation. With S/FCGI you can run the server process under a
> different user id, with different rights to access certain resources,
> even with a different view on the system the software runs on (e.g.
> chroot), or on a separate machine.
Good point. You reminded me of another advantage not explicitly mentioned:
since S/FastCGI daemons connect to the server via tcp sockets, they can be
in remote locations. FastCGI offers some security support too.
Thanks for that!
Boost list run by bdawes at acm.org, gregod at cs.rpi.edu, cpdaniel at pacbell.net, john at johnmaddock.co.uk