Re: Useless error message?

Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]
From: Junio C Hamano
Date: Wednesday, April 21, 2010 - 11:33 pm

Jonathan Nieder <jrnieder@gmail.com> writes:


The true story is a bit different.

To avoid information leak to git-daemon clients, we deliberately choose
not to give detailed error messages, so that you cannot tell if an error
means a user "u" does not exist or "u" does but ~u/repo.git repository
does not exist.


For authenticated users (read: services that typically are behind auth) it
would be a good thing, but "as many as possible" you shouldn't be followed
blindly.
--
To unsubscribe from this list: send the line "unsubscribe git" in
the body of a message to majordomo@vger.kernel.org
More majordomo info at  http://vger.kernel.org/majordomo-info.html
Previous message: [thread] [date] [author]
Next message: [thread] [date] [author]

Messages in current thread:
Useless error message?, Aghiles, (Wed Apr 21, 2:17 pm)
Re: Useless error message?, Kim Ebert, (Wed Apr 21, 2:29 pm)
Re: Useless error message?, Jonathan Nieder, (Wed Apr 21, 3:19 pm)
Re: Useless error message?, Junio C Hamano, (Wed Apr 21, 11:33 pm)
Re: Useless error message?, Jonathan Nieder, (Thu Apr 22, 2:42 am)
Re: Useless error message?, Andreas Ericsson, (Thu Apr 22, 2:59 am)
Re: Useless error message?, Jonathan Nieder, (Thu Apr 22, 3:15 am)
Re: Useless error message?, Andreas Ericsson, (Thu Apr 22, 3:27 am)
Re: Useless error message?, Jonathan Nieder, (Thu Apr 22, 3:38 am)
Re: Useless error message?, Petr Baudis, (Thu Apr 22, 4:56 am)
Re: Useless error message?, Ilari Liusvaara, (Thu Apr 22, 5:44 am)
Re: Useless error message?, Aghiles, (Thu Apr 22, 1:13 pm)
[PATCH] daemon: report inaccessible repositories to user, Jonathan Nieder, (Thu Apr 22, 3:21 pm)