Group Name Guessing Disclosure Policy
Frédéric Buclin
lpsolit at gmail.com
Wed Jul 21 23:37:23 UTC 2010
Le 22. 07. 10 01:26, Max Kanat-Alexander a écrit :
> Yeah, that might be possible. I doubt anybody would turn off the
> parameter, though, and it would have to be on by default, so that we can
> ship secure.
I don't think a new parameter is a good idea, because error messages
would be inconsistent between installations (maybe that's very minor,
but this looks confusing to me). From a technical point of view, a new
parameter doesn't fix anything, and doesn't reduce code complexity.
LpSolit
More information about the developers
mailing list