Recently I wrote about http to https redirection and mentioned in passing somethingabout caring or not caring about security. I figure I should expand onthat a bit.

First off: as I mentioned, caring about encryption is not quite the samething as caring about security. End to end encryption frustrates manysorts of eavesdroppers and is one of the ways of preventing tamperingwith your traffic. But as lots of people have learned the hard way overthe years, encryption by itself does not create security as such.

When I

Our main web server is currently running Ubuntu 8.04. For reasons beyondthe scope of this entry, we want to upgrade it to Ubuntu 10.04, so todayI did a test install, which wound up exploding with a bunch of logmessages that looked like:

[...] .htaccess: Redirect: invalid first argument (of three)

Internet searches will give you inconclusive and somewhat confusedanswers; it doesn't help that Apache doesn't report a line number,