4 ms·

a static site is served by a webserver, but the software to generate it runs elsewhere.

• manmal 11mo ago
  Yes. And a web server has an attack surface, no?
  • mikepurvis 11mo ago
    I think it’s reasonable to understand that nginx/caddy serving static files (or better yet a public s3 bucket doing so) is way, way less of a risk than a dynamic application.
    • manmal 11mo ago
      Of course, that’s true for those web servers. If kept up to date. If not, the attack surface is actually huge because exploits are well known.
      • 63stack 11mo ago
        What are these huge attack surfaces that you are talking about? Any links?