Hiawatha 8.2

Hiawatha is a secure webserver for Unix. It has been written with 'being secure' as its main goal. Hiawatha has many security features that no other webserver has.

This and the fact that Hiawatha's source code is free of security-bugs, makes Hiawatha the most secure webserver available.

Compile and run tests of Hiawatha have successfully been done on Mac OS X, Debian, Ubuntu, Gentoo, Fedora, FreeBSD, OpenBSD, NetBSD, and Cygwin.

It's possible that Hiawatha will compile and run on other Unix-clones as well.

Here are some key features of "Hiawatha":

Request methods:
· GET (duh!)
· POST
· HEAD
· OPTIONS
· TRACE
· PUT
· DELETE

HTTP codes:
· 200 OK
· 201 Created.
· 204 No Content
· 206 Partial Content
· 301 Moved Permanently
· 302 Found
· 304 Not Modified
· 400 Bad Request
· 401 Unauthorized
· 403 Forbidden
· 404 Not Found
· 405 Method Not Allowed
· 408 Request Timeout
· 411 Length Required
· 412 Precondition Failed
· 413 Request Entity Too Large
· 416 Requested Range Not Satisfiable
· 500 Internal Server Error
· 501 Not Implemented
· 503 Service Unavailable
· 505 HTTP Version Not Supported

Extra:
· Access/connection control
· Banning
· CGI support (including PHP)
· CGI wrapper (run CGI under a diffrerent uid/gid in a secure way)
· Chunked Transfer-encoding
· CommandChannel (control Hiawatha by telnetting to a special port)
· Cookie support
· Cross-site scripting prevention
· Customizable ServerString
· Directory listing with customizable stylesheet
· DoS/flooding protection
· FastCGI support (load-balanced)
· GZip Content-Encoding support
· HTTP authentication (basic and digest)
· If-(Un)Modified-Since header field
· Interface binding control
· Internal file caching
· IPv6 support
· Keep-alive connections
· Large file support
· Logging
· Request pipelining
· Range header field (single range support)
· Referer control for images (prevent external image linking)
· Rootjail
· SSL support
· SQL injection prevention
· Traffic throttling/shaping (control uploadspeed)
· URL rewriting via regular expressions
· Userdirectory support

What's New in This Release: [ read full changelog ]

· WebDAVapp option added. Enables support for WebDAV applications like ownCloud (http://owncloud.org/).
· Removed support for the OPTIONS method.
· AllowDotFiles option added.
· Global forks setting in php-fcgi.conf moved to Server setting.
· Small bug fixes and improvements.