On Thu, Jun 6, 2024 at 10:46 AM Christopher Schultz < [email protected]> wrote:
> All, > > I'd like to remove the <!-- and --> around the SecureLifecycleListener > in conf/server.xml that we bundle with Tomcat distributions. > > Before I do so, are there any objections to making this change? > No objections from me. I might suggest making the default buildDateWarningAgeDays something like 6 months though rather than no default. If we're trying to encourage secure practices warning about older builds should be part of that config change IMO > > Thanks, > -chris > > --------------------------------------------------------------------- > To unsubscribe, e-mail: [email protected] > For additional commands, e-mail: [email protected] > >
