3 ms·
What stops you from fronting the legacy or insecure-by-design software with authenticated HTTPS? You just run nginx/Apache on the same host and block direct acc
by guy98238710 8y ago
What stops you from fronting the legacy or insecure-by-design software with authenticated HTTPS? You just run nginx/Apache on the same host and block direct access with a port filter on host's firewall. Setup automated updates to keep the HTTPS front secure. You could even front the app with 2FA, but that's usually an overkill. I don't see how this is any less secure than VPN.