[GitHub] [lucene-solr] rmuir commented on issue #1058: SOLR-13972: Warn about insecure settings on startup

[GitBox <gi...@apache.org>]

rmuir commented on issue #1058: SOLR-13972: Warn about insecure settings on startup
URL: https://github.com/apache/lucene-solr/pull/1058#issuecomment-563225932
 
 
   I don't think we should try to do anything tricky. Warn users when it looks like the configuration is insecure, and give them a way to disable the warning. Make the warning simple and useful. Developers, especially first-use ones, need to see it!
   
   Someone might be doing the TLS+basic auth on their nginx, haproxy, ELB, and its actually secure but doesn't look that way. someone might be bound to all interfaces but not exposed to the outside, because its just docker internal. someone might be bound to what looks like an internal address but its exposed, because that is how some cloud system works, and so on.
   
   

----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
users@infra.apache.org


With regards,
Apache Git Services

---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@lucene.apache.org
For additional commands, e-mail: issues-help@lucene.apache.org