You are here: Home > Safety > Web Site Safety > For All Webmasters

For All Webmasters

Whether you are a professional Webmaster or not, you have a responsibility to ensure that your Web site or Web page is as safe as possible both for yourself and for those who access it. That means that you have a Privacy Policy, SSL (secure server), if you are dealing with personal information or payments and, if you run a message board or chat room, it is (ideally) moderated. Do you run a mailing list or newsletter? Make sure that if you maintain it manually you always use the Bcc option in your e-mail client or, better still, use e-mail list management software like LISTSERV®.

Never believe there is no such thing as bad advertising. If you spam newsgroups with off-topic advertisements for your Web site you are asking for trouble, anything from flaming to retaliatory spamming.

Always back up your data and preferably onto CD or removable memory and never disclose your passwords for anything to anyone. If you have to give someone access to your server - set them up with a temporary, restricted login and remove the priviledge when they are finished. Passwords should be difficult to guess and preferably alphnumeric & case sensitive, like "6hY7e5", for example.

If you are using Server Side Includes and/or CGI-BIN solutions check them for potential security flaws and stay updated on relevant upgrades, patches and fixes.

Regularly check your logs. It is unwise to be complacent regarding hacking, for example. Just because you are a small business with a 5 page Web site or a fan site for banana milkshake does not necessarily mean you are not a target for trouble. In the same breath, "advertising" your Web site's security solutions and bragging about how secure your Web site is can be a red flag - there's a fine line between arrogance and confidence and someone will always try to cross it.

Make a note of this Web site: CERT® Coordination Center (CERT/CC), the center of Internet security expertise. You can read about and stay updated on the subject of Internet Security there in much greater depth than is covered here.