Re: Technical committee acting in gross violation of the Debian constitution

[Matthias Urlichs <matthias@urlichs.de>]

Hi,

Christoph Anton Mitterer:
> For many things, CGI is actually the only way to run them securely,
> since it's the only way to run foreign processes in a container
> environment (chroots, etc.) or with user privilege separation.

?

If you can run a CGI inside a chroot/container/whatever, you can run a
small web server on a local port / Unix socket, and reverse-proxy it,
just as easily.

FastCGI is just a slightly more fancy way of doing this.

> The poor man alternatives like mod-php5 are nothing which a security
> conscious admin would ever use.
> 
Definitely.

-- 
-- Matthias Urlichs