4 ms·
If software has an insecure mode "just for development" that absolutely shouldn't be used in production, you can be certain that a large fraction of developers
by jakobegger 8y ago
If software has an insecure mode "just for development" that absolutely shouldn't be used in production, you can be certain that a large fraction of developers will use that in production nevertheless.
Security today doesn't mean that you are safe if you do everything according to best practices and follow the docs. Modern Security includes making sure that default settings are safe, and that it should be impossible or hard to set up the software in an insecure manner.
If you make it easy to shoot yourself in the foot, that's what people will do.
- raverbashing 8y ago> If you make it easy to shoot yourself in the foot, that's what people will do. Yes they will. Just repeating it here because it bears repeating. Yes, they don't care. And yes, there will be an attacker trying to exploit it.
- heavenlyblue 8y agoWell, then let's allow the evolution take it's place.
- gnur 8y agoTo be fair, this is a limitation of Docker, there is nothing Traefik can do about it.