There is a common reflex in the hosting industry. A client reports a security concern, and the first recommendation they receive is: "Install ModSecurity with the OWASP Core Rule Set." It sounds impressive. It feels like wrapping your server in armor. But in practic... (Read more)