4 ms·
When I learnt Mongo, that was literally the first thing I had to lookup because the docs didn't explain it, or even mention it was insecure. But once it was se
by new_guy 5y ago
When I learnt Mongo, that was literally the first thing I had to lookup because the docs didn't explain it, or even mention it was insecure.
But once it was set up it gives you a login, and I realized it was completely public, anyone could just login there. It's a horrible default to have, but it's weird more people didn't realise how insecure it was.
- MaBeuLux88 5y agoThis doc page has been up for as long as I can remember: https://docs.mongodb.com/manual/administration/security-checklist/ https://docs.mongodb.com/manual/administration/security-chec.... It's also stated in the production notes: https://docs.mongodb.com/manual/administration/production-notes/#networking https://docs.mongodb.com/manual/administration/production-no....