Translation Results Requested Through Conyac Made Public

ACCESS CONTROL
• Only authorised users should be allowed to use the mailing service.
• Use authentication schemes such as passwords or digital signatures to authenticate the emails, and ensure their origin and integrity during transmission.
• The number of users allowed to access the email server should be limited.
• Store emails in secure repository with proper access controls. Care should be taken to maintain the privacy of emails.

WEB SECURITY
Web security is a set of procedures, practices and technologies to protect web servers, web users and internal network. The web server including its components such as the web server's operating system (OS), the network, application programs/software, and all resided information are subject to attacks from the Internet.

Since the web server is facing the Internet, strong host and network security protection should be employed. The security guidelines on web security described in this section should be observed and followed.

WEB SERVER CONFIGURATION AND ADMINISTRATION

Web server software is an application running on a host system, often facing the Internet, to provide information or web services to users. The below designs and configurations are important for deploying a secure web server.
• The web server should be configured not to start up any SMTP service allowing external users to relay mails through the web server.
• All server software and application should be running with the least privilege, especially it should not be running with 'administrator', 'superuser' or 'root' privilege.
• Proper access permissions should be set for directories, files and web pages in the web server.
• All unnecessary network services, applications, or internet protocols should not be running on the web server by default.
• Turn off any potentially dangerous server-side executable codes such as cookies and applets as far as possible.