|
| 1 | +<html> |
| 2 | + <head> |
| 3 | + <meta http-equiv="Content-Type" content="text/html; charset=utf-8"> |
| 4 | + <title>carapace - crustls in apache</title> |
| 5 | + <link href="carapace.css" type="text/css" rel="stylesheet"> |
| 6 | + </head> |
| 7 | + <body class="carapace"> |
| 8 | + <div class="content"> |
| 9 | + <div class="page"> |
| 10 | + <h1>carapace - rustls in apache</h1> |
| 11 | + <p> |
| 12 | + This site uses crustls to embed rustls into mod_tls to |
| 13 | + enable secury and memory safe access to apache. What a |
| 14 | + jumble of words! |
| 15 | + </p> |
| 16 | + <p> |
| 17 | + There is a technology that makes crashes much more rare and |
| 18 | + exploitations of weaknesses much harder. This is called `Rust` |
| 19 | + and it is a programming language that enforces more discipline |
| 20 | + and rewards efforts with less likely screw-ups by the |
| 21 | + programmer. |
| 22 | + </p> |
| 23 | + <p> |
| 24 | + Since web servers on the internet are exposed to the Bad Guys, |
| 25 | + making your web server more secure seems a good idea. |
| 26 | + </p> |
| 27 | + <p> |
| 28 | + This site runs a new apache module named `mod_tls`, which |
| 29 | + does basically what the well known `mod_ssl` does: securing |
| 30 | + your server with `https`. Only instead of the `OpenSSL` library |
| 31 | + it uses `rustls` which provides the encryption of your site |
| 32 | + using Rust, memory-safe technology. |
| 33 | + </p> |
| 34 | + <p> |
| 35 | + Added protection for your apache web server. |
| 36 | + </p> |
| 37 | + <p> |
| 38 | + The projects |
| 39 | + </p> |
| 40 | + <ul> |
| 41 | + <li> |
| 42 | + <a href="https://github.com/ctz/rustls">rustls</a>: |
| 43 | + the implementation of the TLS (aka SSL) protocol. |
| 44 | + </li> |
| 45 | + <li> |
| 46 | + <a href="https://github.com/abetterinternet/crustls">crustls</a>: |
| 47 | + the C binding for the rustls component. |
| 48 | + </li> |
| 49 | + <li> |
| 50 | + <a href="https://github.com/icing/mod_tls">mod_tls</a>: |
| 51 | + the module bringing crustls into apache. |
| 52 | + </li> |
| 53 | + <li> |
| 54 | + <a href="https://httpd.apache.org">httpd</a>: |
| 55 | + the apache web server for the internet since 1997. |
| 56 | + </li> |
| 57 | + |
| 58 | + </ul> |
| 59 | + <p> |
| 60 | + </p> |
| 61 | + |
| 62 | + <div class="footnotes"> |
| 63 | + <div class="footnote"> |
| 64 | + This project is led by the |
| 65 | + <a href="https://www.abetterinternet.org">Internet Security Research Group</a> |
| 66 | + and funded by <a href="https://www.google.com">Google</a>. |
| 67 | + </div> |
| 68 | + <div class="footnote"> |
| 69 | + Image from the Wikipedia article on |
| 70 | + <a href="https://en.wikipedia.org/wiki/Crustacean">Crustacean</a>. |
| 71 | + </div> |
| 72 | + </div> |
| 73 | + </div> |
| 74 | + </div> |
| 75 | + </body> |
| 76 | +</html> |
0 commit comments