security

Configure SSH daemon parameters in /etc/ssh/sshd_config.Read more

Tor is a network of virtual tunnels that allows people and groups to improve their privacy and security on the Internet. It also enables software developers to create new communication tools with built-in privacy features. Tor provides the foundation for a range of applications that allow organizations and individuals to share information over public networks without compromising their privacy.

Individuals use Tor to keep websites from tracking them and their family members, or to connect to news sites, instant messaging services, or the like when these are blocked by their local Internet providers. Tor's hidden services let users publish web sites and other services without needing to reveal the location of the site. Individuals also use Tor for socially sensitive communication: chat rooms and web forums for rape and abuse survivors, or people with illnesses.

Journalists use Tor to communicate more safely with whistleblowers and dissidents. Non-governmental organizations (NGOs) use Tor to allow their workers to connect to their home website while they're in a foreign country, without notifying everybody nearby that they're working with that organization.

Groups such as Indymedia recommend Tor for safeguarding their members' online privacy and security. Activist groups like the Electronic Frontier Foundation (EFF) recommend Tor as a mechanism for maintaining civil liberties online. Corporations use Tor as a safe way to conduct competitive analysis, and to protect sensitive procurement patterns from eavesdroppers. They also use it to replace traditional VPNs, which reveal the exact amount and timing of communication. Which locations have employees working late? Which locations have employees consulting job-hunting websites? Which research divisions are communicating with the company's patent lawyers?Read more

ngx_http_pubcookie_module is a Nginx module which authorizes users using encrypted cookies. Its description is available in russian here.

Pubcookie is a third party module and is not included in the Nginx core.

This module is a port of Pubcookie for Apache. You can find description and example settings of Apache module here.Read more

Let's describe a situation. Drupal is installed in the webserver root, and you want to guard a subdirectory on the server, which is completely separate from Drupal, by Pubcookie authentication. The problem is that Pubcookie internally uses another URL on your server named /Pubcookie.reply, and this URL gets intercepted by Drupal redirector. You can get various sorts of errors like "No granting reply". Pubcookie.reply is a magic URL that Apache knows how to reply to, but Drupal was rewriting it to index.php?q=Pubcookie.reply or alike. As a solution, add the following rewrite rule:

RewriteCond %{REQUEST_URI} !=/PubCookie.reply