Web Security Sourcebook

Rating:
Summary: an excellent hands-on guide
Review: Before reading this book, I thought I understood the important security issues on the web. Boy was I wrong. This book is an excellent guide to the real dangers on the web and how to protect yourself. It is easy reading, although in some parts I found it to be a bit too technical. However, it sure is nice to know that I'm reading something where the authors really know what they are talking about, unlike many technical books that you find nowadays.

Rating:
Summary: The Web Security Sourcebook
Review: This is an excellent "all-topics" covered book about web security. The book covers both server and client side considerations, as well as deployment issues (e.g., position of web servers and firewalls). The authors are among the most qualified security pundits in the industry - Marcus Ranum practically invented the firewall, and explains in lay terms the factors that influence web and server firewall deployment. Dan Geer and Aviel Rubin make outstanding contributions as well.

Rating:
Summary: The Web Security Sourcebook
Review: This is an excellent "all-topics" covered book about web security. The book covers both server and client side considerations, as well as deployment issues (e.g., position of web servers and firewalls). The authors are among the most qualified security pundits in the industry - Marcus Ranum practically invented the firewall, and explains in lay terms the factors that influence web and server firewall deployment. Dan Geer and Aviel Rubin make outstanding contributions as well.

Rating:
Summary: Too bad this was not more professionally written.
Review: This one could have been a contender. Too bad that three authors invested so much time and still could not pull off a professional product. Too bad that their editrs were so sloppy as to leave in way too many typographical errors and usage errors. In addition, it seems that they were more than a bit sloppy in leaving way too many loose ends and innuendoes. They make assumptions on too many points that a simple phone call could have revealed much more information. (e.g. How does Netscape store passwd information??)