3 ms·
Why would you need to avoid logging IPs?
by wemdyjreichert 9y ago
Why would you need to avoid logging IPs?
- jensv 9y agoSome businesses like the VPN industry take pains to respect and protect the user's privacy.
- masonicb00m 9y agoI prefer to look at it the other way around. Why would you need to log IPs? It’s like asking people for their social security number (USA) just to have a unique identifier—this is more info than you need.
- tscs37 9y agoIt can be useful to find out who's been spamming requests at your server and block connections on the firewall level.
- masonicb00m 9y agoGood point.
- kitotik 9y agoFrom the project summary: “You can use this hash to link requests from the same source, without identifying your users by IP address” So perhaps it is/will be possible to take actions against bad IPs.
- tscs37 9y agoWith more difficulty. I can hardly use hashes to blacklist IP ranges in my firewall, even if it could, the performance would suck due to the necessary hashing.
- masonicb00m 9y agoNo. Not using this module. The hashes are based on an ephemeral salt so there is no way to reconstruct the hash using only the IP address.
- AFNobody 9y ago1) You respect user privacy. 2) Your product is user privacy related and you want to state truthfully you do not record user IP addresses anywhere on your end (such as nginx logs that you may still need to debug issues in production).
- youngtaff 9y agoUnder GDPR it's considered personal data