Normd's avatar
Occasional Contributor
7 years ago
New Idea

Collaborator 11

Remove host/ip info from messages sent to users as it is in my opinion useless info and can be a security concern.


In our instance, the server is behind a reverse proxy. Users only know the url. The host info is registered in DNS to the proxy.

Sending the actual server's host info to the user on a password reset is meaningless and negates the purpose of the proxy to hide the actual server from the end users.



No CommentsBe the first to comment