Group Name Guessing Disclosure Policy

Frédéric Buclin lpsolit at gmail.com
Wed Jul 21 23:37:23 UTC 2010


Le 22. 07. 10 01:26, Max Kanat-Alexander a écrit :
> 	Yeah, that might be possible. I doubt anybody would turn off the
> parameter, though, and it would have to be on by default, so that we can
> ship secure.

I don't think a new parameter is a good idea, because error messages
would be inconsistent between installations (maybe that's very minor,
but this looks confusing to me). From a technical point of view, a new
parameter doesn't fix anything, and doesn't reduce code complexity.

LpSolit



More information about the developers mailing list