[thelist] Looking for extra-reliable, extra-secure .Net hosting

Hassan Schroeder hassan.schroeder at gmail.com
Thu Apr 22 10:23:41 CDT 2010


On Thu, Apr 22, 2010 at 7:57 AM, Ed McCarroll <Ed at comsimplicity.com> wrote:

> Eventually, we'll have to run our own data center, but during our start-up
> phase, we are looking into the viability of using a host.

> Which brings me back to the original question: what are the "right
> questions" to be asking if I'm looking for maximum security

While not totally relevant, read through the PCI-DSS requirements for
securing credit-card data, thinking about those SSANs as CC#s.

Check out owasp.org for application security tips, and whatever you
can find relating to security of your OS.

If I *absolutely* had to use a Windows OS, I would run it in a VM on
a *nix host, personally. Running VMs also offers some advantages
in terms of maintenance, scaling, etc.

> and maximum reliability?

Redundant everything. UPS + backup generators. Multiple locations,
geographically distributed.

Staging systems where you can dry-run anything you're about to do
on production. Deployment processes capable of clean rollback when
(not if!) necessary.

That's a starter set, at least :-)

HTH,
-- 
Hassan Schroeder ------------------------ hassan.schroeder at gmail.com
twitter: @hassan


More information about the thelist mailing list