EGI-Federation / EGI-Federation/documentation

Document some security guidelines for VM deployed on Cloud Compute

Open
#547 3 comments 0 reactions 0 assignees View on GitHub
Dominant language
HTML
Stars
15
Forks
52
Avg merge
12h 34m
Merged PRs (30d)
2

Description

We could provide some security guidelines to Cloud Compute users, as an example:
* if a service is ACTIVE on port 80 THERE MUST BE a redirection (automatically or not)
to port 443
* if a service is ACTIVE on port 443 MUST
* ACCEPT only the following protocols:
* TLS 1.2
* TLS 1.3
* REJECT the following protocols
* SSLv2
* SSLv3
* TLS1
* TLS1.1

The following tools are available:
* to safely configure the server: https://ssl-config.mozilla.org/
* to check the solution adopted: https://github.com/drwetter/testssl.sh/tree/3.0

Reference https://ggus.eu/index.php?mode=ticket_info&ticket_id=159474.

Thoughts/opionons?

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.