Skip to main content
Webmasters

Return to Question

replaced http://security.stackexchange.com/ with https://security.stackexchange.com/
Source Link
Community Bot
Community Bot
  • 1

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently some glaring security implications with this setupthere are apparently some glaring security implications with this setup. Most of these security concerns are not too big of an issue because my site is strictly operating with SSL. I'd still like to secure it as much as possible.

Are there any alternative, superior authentication mechanisms for NGINX?

I'm open to anything; this is not a public service.

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently some glaring security implications with this setup. Most of these security concerns are not too big of an issue because my site is strictly operating with SSL. I'd still like to secure it as much as possible.

Are there any alternative, superior authentication mechanisms for NGINX?

I'm open to anything; this is not a public service.

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently some glaring security implications with this setup. Most of these security concerns are not too big of an issue because my site is strictly operating with SSL. I'd still like to secure it as much as possible.

Are there any alternative, superior authentication mechanisms for NGINX?

I'm open to anything; this is not a public service.

Tweeted twitter.com/StackWebmasters/status/732087802494615552
Source Link
Ryan Foley
Ryan Foley
  • 275
  • 1
  • 2
  • 4

More Secure NGINX Authentication than auth_basic

I've been trying to come up with the most secure method of authentication to my reverse proxy in NGINX. I've been using ngx_http_auth_basic_module so far without any issues, but there are apparently some glaring security implications with this setup. Most of these security concerns are not too big of an issue because my site is strictly operating with SSL. I'd still like to secure it as much as possible.

Are there any alternative, superior authentication mechanisms for NGINX?

I'm open to anything; this is not a public service.