Re: mod_security for Apache

I'm fully aware of how Apache came to be and that the i isn't a hobbyist system. My comment was more about the tendency for people not to try something just because it wasn't built by IBM. When you limit yourself like that, you really miss out on a lot of things.

Take the Original HTTP server as a for instance. Feature-wise, it was pretty decent but it was a pain to manage for moderately complicated sites. If IBM had continued to enhance it, I doubt it would have ever come close to what we get with the Apache based server for anything other than trivial sites. I'm not saying that IBM isn't technically able to do something like that but web hosting isn't their core business so there are lots of things they would never think of.

I got first hand experience with this specifically when I was invited to their User Centered Design lab back in 1998 to review upcoming changes to the HTTP server (mostly with the web admin tool which was very new at the time). There were a lot of side bar discussions driven from things I had done running through their script that they hadn't considered that to me seemed pretty obvious since I was handling multiple web sites.

Matt

-----Original Message-----
From: web400-bounces@xxxxxxxxxxxx [mailto:web400-bounces@xxxxxxxxxxxx] On Behalf Of Thorbjørn Ravn Andersen
Sent: Wednesday, February 11, 2009 11:01 AM
To: Web Enabling the AS400 / iSeries
Subject: Re: [WEB400] mod_security for Apache

<snip>
If you don't know the history of Apache it is hard to see at a glance
why the Apache and the i community are so different. :)