Enhanced Security

Web Server 7.0 supports a wide variety of technologies that enable data encryption and validation, request authentication, and server process protection. Key security feature enhancements include the following:

• Denial of Service (DoS) attack protection enhancements

• Cross-site scripting protection through the native sed(1)-based input filtering

• Web Services Security:

  • IETF XML Digital Signature

  • W3C XML Encryption

• Integrated the Platform for Privacy Preferences (P3P) support

• WebDAV access control

• The LDAP auth-db is enhanced to make search expressions and match attributes configurable

• Enhancements to LDAP interaction and Microsoft Active Directory Interoperability

• Support for migration of certificate (JKS) from Apache or Tomcat

• Support for dynamically applied Certificate Revocation Lists (CRLs)