I'm looking for a good resource on tomcat security. Does anyone know of anything apart from the tomcat website?
Secondly: I'm looking at hosting the app myself (I've got a permanent ip address), but I'm a bit concerned about possible network vulnerability if I'm running tomcat. Does anyone have any thoughts? Or indeed a good website I could look at?
Any suggestions gratefully received! Sorry this is such a vague question - I'm at such an early stage of looking at security that I don't even know what questions to ask! :roll: