Contents
Should you disable port 80?
There is nothing insecure about port 80 being open. Security issues only occur when the web server is serving requests over an unencrypted connection, especially if those requests contain sensitive data. Having port 80 be open and send nothing more than an HTTP redirect (301) is perfectly safe.
Should we disable port 80?
Allowing port 80 doesn’t introduce a larger attack surface on your server, because requests on port 80 are generally served by the same software that runs on port 443. Closing port 80 doesn’t reduce the risk to a person who accidentally visits your website via HTTP.
Can a hacker hack into port 80 / 443?
Given that mostly unrestricted access is allowed on port 80/443 it means that the firewall will not block these kind of attacks. A port itself cannot be hacked, rather, it comes down to if the service running on that port contains any vulnerabilities.
Can a website be hacked with only ports open?
I once invited a white hat hacker friend to test my website. Even though the only ports open were for http, https, and SSH, I was surprised to see in his report that there were quite a few critical vulnerabilities. Most of the vulnerabilities were a result of unpatched versions of Apache and PHP.
Are there any ports open for white hat hackers?
Silverleaf Computer Services is an IT service provider. I once invited a white hat hacker friend to test my website. Even though the only ports open were for http, https, and SSH, I was surprised to see in his report that there were quite a few critical vulnerabilities.
What does it mean to have access to port 80?
It means that while almost all outgoing traffic is denied (incoming anyway, unless it is a response to outgoing traffic), visiting external websites from inside a company is usually allowed. This means access to external port 80 (http) and 443 (https).