rmuir commented on issue #1058: SOLR-13972: Warn about insecure settings on startup URL: https://github.com/apache/lucene-solr/pull/1058#issuecomment-563225932 I don't think we should try to do anything tricky. Warn users when it looks like the configuration is insecure, and give them a way to disable the warning. Make the warning simple and useful. Developers, especially first-use ones, need to see it! Someone might be doing the TLS+basic auth on their nginx, haproxy, ELB, and its actually secure but doesn't look that way. someone might be bound to all interfaces but not exposed to the outside, because its just docker internal. someone might be bound to what looks like an internal address but its exposed, because that is how some cloud system works, and so on.
---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: us...@infra.apache.org With regards, Apache Git Services --------------------------------------------------------------------- To unsubscribe, e-mail: issues-unsubscr...@lucene.apache.org For additional commands, e-mail: issues-h...@lucene.apache.org
