From: Darren Garvey (lists.drrngrvy_at_[hidden])
Date: 2007-08-19 16:34:21
On 19/08/07, Martin Wille <mw8329_at_[hidden]> wrote:
>
> Darren Garvey wrote:
>
> > Docs are located at: http://cgi.sf.net
>
> I had a quick glance at the docs. On the "supported protocols" page you
> list when which of the supported protocols could be used. An important
> reason - maybe the most important one - to use FCGI or SCGI is missing:
> privilege separation. With S/FCGI you can run the server process under a
> different user id, with different rights to access certain resources,
> even with a different view on the system the software runs on (e.g.
> chroot), or on a separate machine.
Good point. You reminded me of another advantage not explicitly mentioned:
since S/FastCGI daemons connect to the server via tcp sockets, they can be
in remote locations. FastCGI offers some security support too.
Thanks for that!
Darren