Normd's avatar
Normd
Occasional Contributor
8 years ago
Status:
New Idea

Collaborator 11

Remove host/ip info from messages sent to users as it is in my opinion useless info and can be a security concern.

 

In our instance, the server is behind a reverse proxy. Users only know the url. The host info is registered in DNS to the proxy.

Sending the actual server's host info to the user on a password reset is meaningless and negates the purpose of the proxy to hide the actual server from the end users.

 

   

No CommentsBe the first to comment