Or if users would follow the CF lockdown guides for all production servers... What would be really nice is if the Web Server Configuration Tool had a "secure" checkbox that implemented most of the lockdown guide instructions automatically, and was by default set to checked (users would have to uncheck the box to not implement the lockdown guide).
↧